← Back to Skills Marketplace
chris7iu

QVerisAI

by Chris Liu · GitHub ↗ · v1.0.1
cross-platform ✓ Security Clean
997
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install qverisai
Description
Search and execute dynamic tools via QVeris API. Use when needing to find and call external APIs/tools dynamically — covers weather, search, stocks, finance, economics, geolocation, AIGC, news, social media, health data, and thousands more. Requires QVERIS_API_KEY environment variable.
Usage Guidance
This skill appears to do what it says: it needs a QVERIS_API_KEY and calls qveris.ai to discover and run external APIs. Before installing: 1) Confirm you trust qveris.ai (the service will receive your API key and any parameters you pass). 2) Use a scoped, revocable API key and monitor its usage. 3) Do not pass secrets or sensitive PHI/PII as tool parameters unless you are sure the downstream API and QVeris policy permit it. 4) Note a small metadata inconsistency: registry metadata omitted the required env var while SKILL.md and the script require QVERIS_API_KEY — ensure the platform prompts for the key appropriately.
Capability Analysis
Type: OpenClaw Skill Name: qverisai Version: 1.0.1 The skill is designed to interact with the QVeris API for dynamic tool search and execution. The `scripts/qveris_tool.mjs` code adheres to the security claims made in `SKILL.md`, specifically that it only accesses the `QVERIS_API_KEY` environment variable and sends it exclusively to `https://qveris.ai/api/v1`. There is no evidence of unauthorized data exfiltration, malicious execution, persistence mechanisms, or obfuscation. While the skill passes user-provided JSON parameters directly to the QVeris API, which could be a vulnerability if the OpenClaw agent does not properly sanitize user input before constructing the `--params` argument, this is a vulnerability in the agent's interaction rather than malicious intent within the skill itself. The skill's behavior is clearly aligned with its stated purpose.
Capability Assessment
Purpose & Capability
The skill's name/description (dynamic tool discovery & execution) matches what it requires and does: it asks for a QVERIS_API_KEY and calls https://qveris.ai/api/v1 to search and execute tools. There are no unrelated credentials or unexpected binaries. Note: registry metadata in the header incorrectly listed no required env vars/primary credential while the SKILL.md and script both require QVERIS_API_KEY — this mismatch should be reconciled.
Instruction Scope
SKILL.md and the included script only read QVERIS_API_KEY, POST to qveris.ai, and print results; they do not read other env vars or local files. However, executing a discovered tool means QVeris (the remote service) may in turn call many third-party APIs (weather, health, finance, etc.). That is expected for an aggregator but means user-provided parameters (which may contain sensitive data) will be sent to the remote service.
Install Mechanism
No install spec; this is instruction-only with a small Node.js script included. No downloads, package managers, or extraction from arbitrary URLs are used. Risk from installation is low.
Credentials
Only one credential (QVERIS_API_KEY) is required, which is proportionate to a remote API aggregator. The SKILL.md declares the key as primary and read-only. Double-check that your API key can be scoped/revoked; avoid sending secrets in tool parameters because those parameters are forwarded to the aggregator and its downstream APIs. Also note the registry header omission of the required env var — ensure the platform will request/store the API key properly.
Persistence & Privilege
The skill is not always-enabled and does not request elevated system privileges or modify other skills. It does not persist credentials to disk in included code. Autonomous invocation is allowed (platform default) but is not combined with other concerning privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install qverisai
  3. After installation, invoke the skill by name or use /qverisai
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Added explicit credential and security information, including API key usage, endpoint details, and storage recommendations. - Introduced "requirements" and "credentials" metadata sections to clarify environment variables, access scope, and endpoint. - Documentation now clearly states that only the QVERIS_API_KEY is accessed and never logged or stored. - No changes to feature set or script usage.
v1.0.0
Initial release—enables searching and executing APIs dynamically via QVeris. - Search and discover thousands of external APIs/tools by capability (weather, finance, AI, etc.) - Execute chosen tools with custom parameters and get results. - Node.js script supports search and execution commands directly from the terminal. - Requires QVERIS_API_KEY environment variable for authentication. - Includes example queries and usage instructions for quick setup.
Metadata
Slug qverisai
Version 1.0.1
License
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is QVerisAI?

Search and execute dynamic tools via QVeris API. Use when needing to find and call external APIs/tools dynamically — covers weather, search, stocks, finance, economics, geolocation, AIGC, news, social media, health data, and thousands more. Requires QVERIS_API_KEY environment variable. It is an AI Agent Skill for Claude Code / OpenClaw, with 997 downloads so far.

How do I install QVerisAI?

Run "/install qverisai" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is QVerisAI free?

Yes, QVerisAI is completely free (open-source). You can download, install and use it at no cost.

Which platforms does QVerisAI support?

QVerisAI is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created QVerisAI?

It is built and maintained by Chris Liu (@chris7iu); the current version is v1.0.1.

💬 Comments