← Back to Skills Marketplace
343
Downloads
0
Stars
3
Active Installs
1
Versions
Install in OpenClaw
/install neckr0ik-api-wrapper
Description
Convert any REST API into an OpenClaw skill automatically. Generates SKILL.md, scripts, and claw.json from OpenAPI spec or URL. Use when you want to quickly...
Usage Guidance
This tool looks coherent for its purpose, but review a few things before using: 1) SKILL.md refers to a CLI name (neckr0ik-api-wrapper) while the bundle contains generator.py — you may need to run the script with Python rather than a preinstalled CLI. 2) Generated skills will require you to supply API credentials (API keys, bearer tokens, OAuth) — never paste sensitive credentials without reviewing the generated code and intended endpoints first. 3) The generator will fetch whatever OpenAPI URL you provide and may make test calls to the target API — only point it at trusted endpoints. 4) Inspect the generated SKILL.md and scripts (especially any generated client code) before running them to ensure they don’t override local files you care about. If you want higher confidence, provide the rest of generator.py (it was truncated) so it can be fully reviewed for hidden network calls or unexpected behavior.
Capability Analysis
Type: OpenClaw Skill
Name: neckr0ik-api-wrapper
Version: 1.0.0
The skill is a utility for generating OpenClaw skills from OpenAPI specifications, but it contains a code injection vulnerability in `scripts/generator.py`. The generator embeds strings from untrusted API specs (such as `base_url`, `title`, and `description`) directly into f-strings used to create the generated `api.py` client without sufficient sanitization. While no intentional malice is evident, a specially crafted OpenAPI spec could lead to the generation of a malicious Python script that executes arbitrary code when the generated skill is used.
Capability Assessment
Purpose & Capability
The name/description (generate OpenClaw skills from OpenAPI) align with the included generator.py and SKILL.md. The code reads OpenAPI specs (local or remote), parses auth info and endpoints, and writes SKILL.md, claw.json, and scripts — exactly the stated capability.
Instruction Scope
SKILL.md instructs CLI usage (neckr0ik-api-wrapper generate/validate/test). The repository includes a generator.py script (no explicit CLI installer); this is a minor mismatch (docs imply a packaged CLI). The runtime instructions focus on fetching/parsing OpenAPI specs and generating files and do not instruct reading unrelated system files or exfiltrating secrets. Generated skills will rely on user-supplied API credentials to test/call endpoints — expected for the purpose.
Install Mechanism
No install spec; this is an instruction-only skill with an included Python script. Nothing is downloaded or extracted at install time. Generator fetches user-specified OpenAPI URLs at runtime (expected). No external install URLs or archive extraction are present.
Credentials
The skill declares no required environment variables or credentials. The generator inspects API security schemes and generates guidance to configure API keys / bearer tokens for the generated skill — appropriate for a wrapper generator. It does not request unrelated service credentials.
Persistence & Privilege
always:false (default) and autonomous invocation not disabled — normal for user-invocable skills. The generator writes files into the chosen output directory (expected behavior) and does not claim system-wide or other-skills configuration privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install neckr0ik-api-wrapper - After installation, invoke the skill by name or use
/neckr0ik-api-wrapper - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of neckr0ik-api-wrapper.
- Automatically generates OpenClaw skills from any REST API's OpenAPI spec or URL.
- Creates SKILL.md, scripts (type-safe API client), and claw.json.
- Supports multiple authentication types: API key, Bearer, Basic Auth, and OAuth2.
- Includes commands to generate, validate, and test skills.
- Outputs well-structured, documented, and ready-to-use OpenClaw skills.
Metadata
Frequently Asked Questions
What is Neckr0ik Api Wrapper?
Convert any REST API into an OpenClaw skill automatically. Generates SKILL.md, scripts, and claw.json from OpenAPI spec or URL. Use when you want to quickly... It is an AI Agent Skill for Claude Code / OpenClaw, with 343 downloads so far.
How do I install Neckr0ik Api Wrapper?
Run "/install neckr0ik-api-wrapper" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Neckr0ik Api Wrapper free?
Yes, Neckr0ik Api Wrapper is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Neckr0ik Api Wrapper support?
Neckr0ik Api Wrapper is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Neckr0ik Api Wrapper?
It is built and maintained by Neckr0ik (@neckr0ik); the current version is v1.0.0.
More Skills