← Back to Skills Marketplace
482
Downloads
0
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install qverisai-1-0-1
Description
Search and execute dynamic tools via QVeris API. Use when needing to find and call external APIs/tools dynamically — covers weather, search, stocks, finance,...
Usage Guidance
There are clear packaging/metadata inconsistencies even though the code itself appears to implement the described functionality. Before installing: 1) Confirm the registry metadata is corrected to declare QVERIS_API_KEY as a required credential (so you know to provide a scoped, revocable key). 2) Verify the skill owner and version (ownerId and version mismatch between header and _meta.json). 3) If you proceed, create a scoped, revocable API key at qveris.ai and monitor its usage. 4) Remember the skill can be invoked autonomously by the agent — only enable if you trust qveris.ai and the skill author. If the registry metadata cannot be fixed or the owner/version discrepancy is unexplained, treat the package as untrusted until clarified.
Capability Analysis
Type: OpenClaw Skill
Name: qverisai-1-0-1
Version: 1.0.0
The OpenClaw skill `qverisai` is a client for the QVeris API, designed to search and execute dynamic tools. The `SKILL.md` clearly defines its purpose, required environment variables (`QVERIS_API_KEY`), and network endpoint (`https://qveris.ai/api/v1`). The `scripts/qveris_tool.mjs` code strictly adheres to these declarations, only accessing the specified API key and communicating solely with the declared QVeris endpoint. It uses only Node.js built-in `fetch`, avoiding external dependencies. There is no evidence of prompt injection, data exfiltration (beyond the API key to its intended service), unauthorized command execution, persistence mechanisms, or obfuscation. The skill's behavior is fully aligned with its stated purpose as a legitimate API client.
Capability Assessment
Purpose & Capability
The skill's name and description (dynamic tool discovery via QVeris) match the code and SKILL.md: the CLI calls https://qveris.ai/api/v1 to search and execute tools across many domains. However the published registry metadata in the header (Required env vars: none, Primary credential: none) contradicts the SKILL.md and the script, which both require QVERIS_API_KEY. There is also a minor ownerId/version mismatch between the registry header and _meta.json.
Instruction Scope
SKILL.md instructs the agent to only use QVERIS_API_KEY and to communicate with https://qveris.ai/api/v1. The included script uses process.env.QVERIS_API_KEY, performs POST requests to /search and /tools/execute, formats output, and does not read other environment variables or local sensitive files. The runtime instructions and implementation are consistent with each other.
Install Mechanism
This is an instruction-only skill with a small Node.js script and no install spec or external downloads. No third-party packages are installed and no files are extracted — low installation risk.
Credentials
The script legitimately needs a single API key (QVERIS_API_KEY) to contact the service; that's proportionate to its purpose. The concern is that the registry metadata does not declare this required credential (saying 'none'), which is an incoherence that could cause silent failures or, worse, accidental exposure if users supply keys assuming different behavior. SKILL.md claims the key is only sent to qveris.ai and never logged; the code appears to follow that, sending the key in an Authorization header and not writing it to disk.
Persistence & Privilege
The skill does not request 'always: true', does not modify other skills' configs, and has no install-time persistence beyond being placed in the skills directory. It can be invoked autonomously by the agent (default), which increases blast radius if the skill had malicious behavior, but the code does not request elevated system privileges or persistent system-wide changes.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install qverisai-1-0-1 - After installation, invoke the skill by name or use
/qverisai-1-0-1 - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the qverisai skill.
- Enables dynamic discovery and execution of external APIs/tools via QVeris API.
- Supports wide-ranging queries across weather, finance, economics, geolocation, AIGC, news, social media, health data, and more.
- Requires a QVERIS_API_KEY environment variable for operation.
- Includes CLI examples for searching and executing API tools dynamically.
Metadata
Frequently Asked Questions
What is Qverisai 1.0.1?
Search and execute dynamic tools via QVeris API. Use when needing to find and call external APIs/tools dynamically — covers weather, search, stocks, finance,... It is an AI Agent Skill for Claude Code / OpenClaw, with 482 downloads so far.
How do I install Qverisai 1.0.1?
Run "/install qverisai-1-0-1" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Qverisai 1.0.1 free?
Yes, Qverisai 1.0.1 is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Qverisai 1.0.1 support?
Qverisai 1.0.1 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Qverisai 1.0.1?
It is built and maintained by pippo (@pippo1980); the current version is v1.0.0.
More Skills