← Back to Skills Marketplace
Ocli Api
by
Valerii Kovalskii
· GitHub ↗
· v1.0.0
· MIT-0
213
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install ocli-api
Description
Turn any OpenAPI/Swagger API into CLI commands and call them. Search endpoints with BM25, check parameters, execute — no MCP server needed.
Usage Guidance
This skill is a thin adapter that tells the agent to call the ocli CLI to discover and call OpenAPI endpoints. Before installing or using it: (1) verify and trust the 'openapi-to-cli' npm package (review its repository and release source); (2) only configure API profiles with least-privilege tokens and avoid putting high-privilege secrets in environment variables the agent can access; (3) be aware the agent will be able to make arbitrary HTTP calls to any configured base URL — avoid pointing it at sensitive internal services unless you intend that access; (4) pin package versions or install from a known-good release to reduce supply-chain risk.
Capability Analysis
Type: OpenClaw Skill
Name: ocli-api
Version: 1.0.0
The ocli-api skill is a legitimate utility designed to allow an AI agent to interact with REST APIs via the 'ocli' CLI tool. It provides structured instructions (SKILL.md) for the agent to search, inspect, and execute API commands based on OpenAPI specifications, including sensible guardrails and error handling. The skill requires the user to manually install the 'openapi-to-cli' npm package and configure API profiles, and it lacks any evidence of malicious intent, data exfiltration, or prompt injection attacks.
Capability Assessment
Purpose & Capability
Name/description say 'turn OpenAPI into CLI commands' and the skill requires the 'ocli' binary; that is coherent. No unrelated binaries, env vars, or config paths are requested.
Instruction Scope
SKILL.md instructs the agent to run ocli commands (search, inspect, execute) against OpenAPI specs. This stays within the declared purpose, but those commands enable the agent to make arbitrary HTTP requests to whatever API base URL/profile is configured — which can access internal endpoints or accept user-supplied tokens. The instructions do not tell the agent to read unrelated local files, but they do encourage parsing JSON responses and supplying request parameters, which could include sensitive values if provided.
Install Mechanism
This is an instruction-only skill (no install spec). The SKILL.md asks users to 'npm install -g openapi-to-cli' in the setup example. That's reasonable for an instruction-only skill, but npm packages run arbitrary code at install/runtime — you should verify the openapi-to-cli package and its provenance before installing.
Credentials
The skill declares no required env vars, yet the setup examples show supplying a bearer token via --api-bearer-token "$TOKEN". This is not inherently malicious, but it's a mismatch: the skill will expect the user (or agent) to provide API tokens for target APIs even though no primaryEnv is declared. Ensure tokens are least-privilege and not left in environments the agent can read unintentionally.
Persistence & Privilege
always is false, no config paths or system-wide modifications are requested. The skill does not request elevated or permanent presence.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install ocli-api - After installation, invoke the skill by name or use
/ocli-api - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of ocli-api
- Launches ocli-api for turning any OpenAPI/Swagger API into CLI commands.
- Enables endpoint search using BM25 or regex queries.
- Supports checking command parameters and executing API calls directly from the CLI.
- No MCP server or code generation required; minimal token usage.
- Includes guardrails and troubleshooting guidance for common errors.
Metadata
Frequently Asked Questions
What is Ocli Api?
Turn any OpenAPI/Swagger API into CLI commands and call them. Search endpoints with BM25, check parameters, execute — no MCP server needed. It is an AI Agent Skill for Claude Code / OpenClaw, with 213 downloads so far.
How do I install Ocli Api?
Run "/install ocli-api" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Ocli Api free?
Yes, Ocli Api is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Ocli Api support?
Ocli Api is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Ocli Api?
It is built and maintained by Valerii Kovalskii (@vakovalskii); the current version is v1.0.0.
More Skills