Skill Router Bzai

For each candidate skill, score on:

Scoring Algorithm:

final_score = (quality × 0.35) + (token_score × 0.30) + (security × 0.20) + (speed × 0.15)

4. Generate Recommendations

Present Top-3 ranked options:

• Rank, skill name, final score
• Breakdown by dimension
• Estimated tokens and time
• Reasoning for recommendation
• Security assessment summary

5. User Confirmation

Wait for user to:

• Select option (1, 2, or 3)
• Request more details about a skill
• Cancel or modify the task

6. Execute

After confirmation:

• If skill not installed: clawhub install <skill>
• Execute the skill with original user request
• Record actual metrics vs estimates

Security Assessment

Before recommending any skill from clawhub:

1. Code Review: Check for suspicious patterns (network calls, file system access, credential harvesting)
2. Permission Analysis: Verify requested permissions match functionality
3. Author Verification: Prefer verified authors, established projects
4. Update Frequency: Recently updated skills are preferred
5. Community Trust: Ratings, issues, download count

Red flags that disqualify a skill:

• Requests excessive permissions for its stated purpose
• Contains obfuscated code
• Makes unexpected network calls
• Has no recent updates and low community engagement

Token Estimation

Estimate token costs based on:

• Skill description length/complexity
• Historical usage data (if available)
• Number of API calls required
• Output format verbosity

Store actual vs estimated for continuous improvement.

Scripts

• scripts/evaluate_skill.py - Score a skill across all dimensions
• scripts/search_clawhub.py - Search and fetch skill metadata from clawhub
• scripts/calculate_cost.py - Estimate token and time costs

References

• references/evaluation-rubric.md - Detailed scoring criteria
• references/security-checklist.md - Security audit checklist