← 返回 Skills 市场
dngpng

apix

作者 Andy · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
363
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install apix
功能描述
Use `apix` to search, browse, and execute API endpoints from local markdown vaults. Use this skill to discover REST API endpoints, inspect request/response s...
使用说明 (SKILL.md)

apix — API Explorer for Agents

apix is a CLI tool for importing, browsing, searching, and calling API endpoint documents stored as local markdown vaults.

Prerequisites & Installation

Before using apix, verify if it is installed:

apix --version

If it is not installed, install it using Homebrew (macOS/Linux):

brew tap apix-sh/tap
brew install apix

Or via the curl installer:

curl -fsSL https://apix.sh/install | sh

Agent Workflow Guidelines

When an API task is requested, follow this general workflow:

  1. Discover: Find the relevant endpoint route.

    apix search "create pet"
    # Or list available APIs: apix ls
    
  2. Inspect: Check the endpoint parameters and schema concisely to save your context window.

    apix peek petstore/v1/pets/{petId}/GET
    

    Note: Only use apix show \x3Croute> if you need the full, detailed documentation, as it can be long.

  3. Execute: Make the HTTP call using the route you found.

    apix call demo/v1/items/{id}/POST -p id=item_123 -d '{"name":"item"}'
    

Core Commands

Search & Discovery

  • Search across all indexed APIs: apix search \x3Cquery>
  • List namespaces: apix ls
  • List endpoints in a namespace: apix ls \x3Cnamespace>/\x3Cversion> (e.g., apix ls petstore/v1)
  • Full-text search within a namespace: apix grep \x3Cnamespace> \x3Cquery>

Inspecting Endpoints

Routes follow the format: \x3Cnamespace>/\x3Cversion>/\x3Cpath segments>/\x3CMETHOD> (e.g., petstore/v1/pets/GET).

  • Peek (Recommended for Agents): apix peek \x3Croute> — Outputs the YAML frontmatter and condensed required input fields.
  • Show: apix show \x3Croute> — Outputs the full markdown documentation for the route or type.

Executing HTTP Calls

apix call automatically resolves the URL, method, and auth requirements from the route's markdown frontmatter.

  • Basic call with a literal path segment:

    apix call demo/v1/items/item_123/GET
    

    (apix automatically maps item_123 to the {id} parameter if the defined route is demo/v1/items/{id}/GET)

  • Explicit parameters:

    apix call demo/v1/items/{id}/POST \
      -p id=item_123 \
      -q expand=full \
      -H "Authorization: Bearer \x3Ctoken>" \
      -d '{"name":"item"}'
    
    • -p \x3Ckey>=\x3Cvalue>: Path parameter
    • -q \x3Ckey>=\x3Cvalue>: Query parameter
    • -H "\x3CHeader>: \x3CValue>": HTTP Header
    • -d '\x3Cdata>' or -d @file.json: Request body

Importing Custom Specs

If the required API is not in the public registry, you can import an OpenAPI 3.x spec locally:

apix import /path/to/openapi.json --name myapi

Notes for Agents

  • When you execute apix commands via the shell, it detects that stdout is piped and will automatically emit raw markdown, which is perfectly structured for you to read.
  • apix routes are standard strings. If a route matches multiple sources, apix will throw an ambiguity error. In that case, prefix the route with the source (e.g., core/petstore/v1/pets/GET).
  • Prioritize peek over show to avoid flooding your context window with redundant schemas.
安全使用建议
This skill appears to do what it says, but be careful about the installation recommendation. Prefer installing via Homebrew if available. Do NOT run curl -fsSL https://apix.sh/install | sh unless you have verified the publisher and reviewed the installer script — running remote install scripts executes arbitrary code. Before installing, verify the apix.sh domain ownership (project homepage/repository), inspect the installer script content, or install from a trusted package source. When using apix to call APIs, avoid pasting long-lived secrets into commands in shared shells; prefer using secure token storage or temporary tokens.
功能分析
Type: OpenClaw Skill Name: apix Version: 1.0.0 The skill bundle describes a CLI tool for API exploration but includes high-risk installation instructions in SKILL.md that direct the agent to execute a remote script via 'curl | sh' from apix.sh. This pattern is a significant security risk as it facilitates unverified remote code execution (RCE) and introduces a supply-chain vulnerability. While the tool's ability to make arbitrary HTTP calls (apix call) is aligned with its stated purpose, the combination of automated installation and broad network access warrants a suspicious classification.
能力评估
Purpose & Capability
Name/description (search, browse, execute API endpoints from local markdown vaults) align with the SKILL.md workflow and commands (apix search, peek, show, call, import). The skill does not request unrelated env vars, binaries, or config paths.
Instruction Scope
Runtime instructions are focused on using the apix CLI and importing local OpenAPI files. They instruct the agent to run apix commands and to include Authorization headers when calling APIs (expected). They do not direct the agent to read unrelated system files or harvest environment variables, but they do instruct installation steps which can cause further actions (see install_mechanism).
Install Mechanism
No formal install spec in registry, but SKILL.md recommends installing via Homebrew (reasonable) or via an online installer: curl -fsSL https://apix.sh/install | sh. Running a remote installer (curl|sh) from a non-standard domain is a high-risk pattern because it executes code fetched from the network without review. The domain is not a known release host like GitHub Releases.
Credentials
The skill declares no required environment variables or credentials. Example usage shows an Authorization header for API calls, which is appropriate for the stated purpose. There is no request for unrelated secrets or broad credential access.
Persistence & Privilege
Flags: always:false, user-invocable true, model invocation allowed — standard. The skill does not request persistent system-level privileges or modify other skill configs.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install apix
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /apix 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial publish. apix is a local-first, progressive disclosure CLI tool for agents and humans to explore, browser and call API endpoints. Use this skill to discover REST API endpoints, inspect request/response schemas, and make HTTP calls directly from the terminal without leaving your environment.
元数据
Slug apix
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

apix 是什么?

Use `apix` to search, browse, and execute API endpoints from local markdown vaults. Use this skill to discover REST API endpoints, inspect request/response s... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 363 次。

如何安装 apix?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install apix」即可一键安装,无需额外配置。

apix 是免费的吗?

是的,apix 完全免费(开源免费),可自由下载、安装和使用。

apix 支持哪些平台?

apix 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 apix?

由 Andy(@dngpng)开发并维护,当前版本 v1.0.0。

💬 留言讨论