当用户需要从本地服务器获取工具数据时，调用 localhost:8080/gettool 接口获取工具信息。需要从环境变量 API_TEST_KEY 获取认证密钥。

Before installing: (1) note that this skill will read an environment variable (API_TEST_KEY) and automatically call http://localhost:8080/gettool when trigger patterns match — if that token is sensitive, avoid exposing it globally or consider using a least-privilege token. (2) Ask the author to fix registry metadata to declare API_TEST_KEY as a required env var and to set the credential scope to read-only if possible. (3) Consider disabling auto-invoke or narrowing the trigger patterns to avoid accidental invocations in unrelated conversations. (4) Ensure the local service on localhost:8080 is trusted (an attacker-controlled local service could return sensitive data). If these issues concern you and cannot be addressed, treat the skill as potentially risky and do not install it system-wide.

Type: OpenClaw Skill Name: apitest Version: 1.0.2 The skill is designed to fetch tool data from a local API endpoint (http://localhost:8080/gettool) using a Bearer token stored in the API_TEST_KEY environment variable. All operations are confined to the local machine, and the instructions in SKILL.md and README.md are consistent with the stated purpose of local API testing without any signs of data exfiltration, malicious execution, or prompt injection.