← Back to Skills Marketplace
Vapi AI
by
Colin Lowenburg
· GitHub ↗
· v0.1.0
1427
Downloads
0
Stars
4
Active Installs
1
Versions
Install in OpenClaw
/install vapi
Description
Manage Vapi voice assistants, calls, phone numbers, tools, and webhooks via the Vapi REST API or CLI for voice agent operations and integrations.
Usage Guidance
This skill appears to be a straightforward Vapi API integration with a small helper script, but: 1) the registry metadata omits the required VAPI_API_KEY — plan to provide that key as a secure gateway secret (don't paste it into public logs); 2) avoid blindly running curl | bash from https://vapi.ai/install.sh — fetch and inspect the installer first or install from a verified package source (GitHub release or package manager) if available; 3) review bin/vapi-api.mjs (it's small and readable) to confirm it only calls the Vapi API; and 4) if you need stronger assurance, request the publisher update the registry metadata to list VAPI_API_KEY and provide a vetted install mechanism or a link to a specific, auditable release.
Capability Analysis
Type: OpenClaw Skill
Name: vapi
Version: 0.1.0
The `SKILL.md` file instructs the AI agent to execute `curl -sSL https://vapi.ai/install.sh | bash` as an option to install the Vapi CLI. This command downloads and executes remote code, which is a high-risk operation for an autonomous agent, even though the source (`vapi.ai`) is legitimate and the intent is to install a tool relevant to the skill's stated purpose. This constitutes a risky capability without clear malicious intent, making the skill suspicious. The `bin/vapi-api.mjs` script, however, appears benign, performing standard API interactions with `https://api.vapi.ai`.
Capability Assessment
Purpose & Capability
The skill's stated purpose (manage Vapi assistants, calls, phone numbers, tools, webhooks) matches the included helper script and API endpoints. However, the registry metadata claims no required environment variables while SKILL.md and the helper script both require VAPI_API_KEY (and optionally VAPI_MODE and VAPI_BASE_URL). This metadata mismatch is likely an oversight but is an incoherence the buyer should be aware of.
Instruction Scope
SKILL.md confines runtime actions to calling Vapi's REST API or using the Vapi CLI. The instructions do not ask the agent to read unrelated local files or exfiltrate arbitrary data. They do, however, recommend piping an install script from the network (see install mechanism), which broadens scope implicitly by running external code.
Install Mechanism
There is no formal install spec in the registry, but the README/SKILL.md suggests running curl -sSL https://vapi.ai/install.sh | bash to install the CLI. Download-and-execute-from-network is higher risk — you should inspect that install script's contents or prefer verified package sources before running it. The included helper (bin/vapi-api.mjs) itself is small and readable.
Credentials
Functionality reasonably requires one credential: VAPI_API_KEY, which SKILL.md documents. That is proportionate. But the registry metadata lists no required env vars (incoherent). SKILL.md also references VAPI_MODE and VAPI_BASE_URL for configuration; ensure only the API key is provided to the skill and that it's stored as a gateway secret rather than pasted into logs. No other unrelated credentials are requested.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or global agent settings, and does not request persistent system privileges. Autonomous invocation is allowed (platform default) but not combined with other high-risk flags.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install vapi - After installation, invoke the skill by name or use
/vapi - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release
Metadata
Frequently Asked Questions
What is Vapi AI?
Manage Vapi voice assistants, calls, phone numbers, tools, and webhooks via the Vapi REST API or CLI for voice agent operations and integrations. It is an AI Agent Skill for Claude Code / OpenClaw, with 1427 downloads so far.
How do I install Vapi AI?
Run "/install vapi" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Vapi AI free?
Yes, Vapi AI is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Vapi AI support?
Vapi AI is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Vapi AI?
It is built and maintained by Colin Lowenburg (@colygon); the current version is v0.1.0.
More Skills