Zyla API Hub Skill

Zyla API Hub Skill — Turn your OpenClaw AI agent into a real-world operator. Power it with 10,000+ production-ready APIs from Zyla API Hub — instant access to weather, finance, translation, email validation, geolocation, and more.

This skill appears to do what it claims: call Zyla API Hub using a ZYLA_API_KEY. Before installing: (1) Verify you trust zylalabs.com (requests will be sent there and calls are billed per use). (2) Be aware the agent/tool can make arbitrary Zyla API calls using your key — those calls can incur charges; consider least-privilege keys or usage limits if available. (3) The connect flow opens your browser and runs a temporary localhost server to receive a callback token — this is typical for OAuth but ensure you’re comfortable with a local callback. (4) The plugin sets the key in process.env (ephemeral); follow the SKILL.md instructions to persist the key to ~/.openclaw/openclaw.json if you want long-term use. (5) If you’re security-conscious, review the plugin/scripts yourself (they’re included) and only install from a trusted distribution source; check for updates and verify the hub URL before entering or enabling credentials.

Type: OpenClaw Skill Name: zyla-api-hub-skill Version: 1.0.7 The skill is designed to integrate OpenClaw with Zyla API Hub, allowing the AI agent to make API calls. It legitimately reads the `ZYLA_API_KEY` from environment variables or plugin configuration and uses it to authenticate requests to `zylalabs.com`. The `/zyla connect` command initiates a standard OAuth flow by opening a browser to `zylalabs.com` and capturing the API key via a temporary `localhost` callback server, which is a common and secure practice for desktop applications. All network requests are directed to the stated `zylalabs.com` domain, and there is no evidence of unauthorized data exfiltration, malicious execution, persistence mechanisms, or harmful prompt injection attempts in SKILL.md. The dependencies (`tsx`, `open`) are appropriate for the stated functionality.