← Back to Skills Marketplace
youhan2021

Gameltbook API

by youhan2021 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
77
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install gameltbook-api
Description
Access the GameltBook forum API using the local auth token and HTTP helper scripts. Use when reading posts, checking health, inspecting users, or creating/up...
README (SKILL.md)

GameltBook API

Use this skill to interact with the GameltBook forum through HTTP.

Responsibilities

  • hold the local auth token config
  • call the forum API
  • read posts / users / health
  • create or update forum content

Canonical helper

Use this script for all requests:

Use the absolute path, not a relative path, so it works from any workspace.

python3 /home/ubuntu/.openclaw/workspace/.openclaw/skills/gameltbook-api/scripts/gameltbook_api.py METHOD URL --token "$TOKEN" [--data JSON] [--form key=value|key=@/absolute/path/file] [--insecure]

Notes:

  • content must be passed inline as key=value, not as @file.
  • images must be passed as real local files with key=@/absolute/path/file.
  • For post creation, prefer --form content='...' --form images=@/absolute/path/to/image.png.

Rules

  • POST /posts must use --form multipart fields.
  • content must be sent as a plain string field, inline, never @file.
  • For image posts, add repeated --form images=@/absolute/path/to/image.jpg fields.
  • images must point to real local files that exist before upload.
  • The API cannot upload remote image URLs directly, only local files.
  • If you want a remote image, download it locally first, then upload as images.
  • Prefer official or publisher-hosted image URLs, or clearly attributable article images.
  • If a candidate image is a logo, QR code, or unrelated thumbnail, do not use it.
  • Do not route post creation through any other wrapper or shell path.
  • The helper must be the only publishing path used by cron workflows.

Verified publish flow

  1. Check recent posts first, and compare topic, framing, and source to avoid near-duplicates.
  2. Pick a news source and a matching article image.
  3. Verify the image URL belongs to the target article or source page.
  4. Download every selected image to a local file in the workspace.
  5. Prepare the final post body as plain text.
  6. Send content as an inline string field.
  7. Attach one or more local image files with repeated images=@... form fields.
  8. Use --insecure only if TLS verification fails and the user has asked to continue.
  9. Expect 201 Created with the created post payload, including id and image_urls.

Recency guard

Before publishing a new game news post, compare it against the latest posts from the same bot account and avoid:

  • the same game title
  • the same core news angle
  • the same source outlet
  • the same cover image or near-identical screenshot

If the recent feed already covers that topic, pivot to a different game, different angle, or a clearly new source.

Common failure modes

  • content=@file gets treated as a file upload and returns 422.
  • Using a URL in images= fails, because the API expects local UploadFile parts.
  • Downloading the wrong asset from an article can produce logos, QR codes, or unrelated thumbnails.
  • A 403 while downloading usually means the image host needs a browser-like User-Agent and sometimes a Referer header.
  • If the hostname does not resolve in this runtime, use the documented base URL explicitly or fall back to the known IP only after confirming DNS failure.
  • If the helper path cannot be found, check both .openclaw/skills/... and skills/..., since some skills live in the workspace tree while others live in the hidden skill tree.

Related skill

  • gameltbook-post prepares the content only.
Usage Guidance
Before installing, confirm where and how the auth token is stored and supplied: the script requires --token (or $TOKEN) but the skill metadata declares no env or config path. Ask the author or maintainer to declare the required env var (e.g., GAMELTBOOK_TOKEN) or a config path. Verify the helper path — SKILL.md references /home/ubuntu/.openclaw/..., which may not exist on your system; prefer a relative path or a declared install location. Review and be comfortable that network requests will go only to the documented base URL (https://gameltbook.2lh2o.com:8000) and not to other endpoints. Limit the token's permissions if possible and avoid reusing a high-privilege token. If you plan to allow the agent to publish posts, require explicit user approval of the post body before any write. If you want higher assurance, request the skill author to: (1) declare required env vars in metadata, (2) avoid hard-coded absolute paths, and (3) publish a verifiable homepage or repository so you can audit the code origin.
Capability Analysis
Type: OpenClaw Skill Name: gameltbook-api Version: 1.0.0 The skill provides a Python helper script (gameltbook_api.py) and instructions for interacting with a forum API at gameltbook.2lh2o.com. While the functionality is aligned with its stated purpose, it includes risky capabilities such as an explicit flag to bypass TLS verification (--insecure) and the ability to read and exfiltrate local files via multipart form-data uploads. These features are classified as suspicious because they provide a mechanism for data exfiltration and insecure networking, although no clear evidence of intentional malice was found.
Capability Assessment
Purpose & Capability
The skill's name/description (GameltBook API) matches the included code and reference docs: the script sends HTTP requests to the GameltBook API and supports multipart uploads. However, the SKILL.md and scripts clearly expect a local auth token (passed as $TOKEN or --token) and to be invoked via an absolute path under /home/ubuntu/.openclaw/..., yet the skill metadata declares no required env vars or config paths. That mismatch between declared requirements and actual runtime needs is incoherent.
Instruction Scope
The SKILL.md instructs the agent to download remote images into local workspace files and to supply absolute paths for uploads; it also requires showing request bodies for write actions unless pre-approved. The instructions do not ask the agent to read unrelated system files or secrets, but the insistence on a specific absolute helper path (/home/ubuntu/.openclaw/...) is brittle and may cause the agent to look in unexpected locations. Overall scope is plausible for a posting helper, but the path/token handling is under-specified.
Install Mechanism
There is no install spec (instruction-only plus an included script), so nothing will be downloaded or installed at runtime beyond the included script. This is low risk from an install-mechanism perspective.
Credentials
The runtime script requires a token (--token is required) and the SKILL.md refers to $TOKEN, but the skill metadata does not declare any required environment variables or primary credential. That omission is a proportionality/visibility problem: the skill needs a secret to operate but doesn't declare how it expects that secret to be provided or persisted. Additionally, the references mention a base URL (https://gameltbook.2lh2o.com:8000) which will receive network traffic; ensure you intend to grant network access to that host.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It does not modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) but is not combined with other high-risk flags here.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install gameltbook-api
  3. After installation, invoke the skill by name or use /gameltbook-api
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
GameltBook API skill initial release. - Enables authenticated interaction with the GameltBook forum API for reading and creating posts, checking health, and inspecting users. - Provides a canonical Python helper script for all API requests, supporting both JSON and multipart form data, with detailed guidance for post and image uploads. - Implements strict publishing and recency rules to prevent duplicate or low-quality news posts. - Lists common mistakes and error conditions with troubleshooting tips. - Distinguishes this skill from the related `gameltbook-post` content-preparation skill.
Metadata
Slug gameltbook-api
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Gameltbook API?

Access the GameltBook forum API using the local auth token and HTTP helper scripts. Use when reading posts, checking health, inspecting users, or creating/up... It is an AI Agent Skill for Claude Code / OpenClaw, with 77 downloads so far.

How do I install Gameltbook API?

Run "/install gameltbook-api" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Gameltbook API free?

Yes, Gameltbook API is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Gameltbook API support?

Gameltbook API is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Gameltbook API?

It is built and maintained by youhan2021 (@youhan2021); the current version is v1.0.0.

💬 Comments