← 返回 Skills 市场

Lap Aftermarket Api

Name: Lap Aftermarket Api
Author: mickmicksh

作者 mickmicksh · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

120

总下载

当前安装

版本数

在 OpenClaw 中安装

/install lap-aftermarket-api

功能描述

Aftermarket API skill. Use when working with Aftermarket for customers, aftermarket. Covers 3 endpoints.

使用说明 (SKILL.md)

Aftermarket API

API version: 1.0.0

Auth

No authentication required.

Base URL

Not specified.

Setup

No auth setup needed
GET /v1/customers/{customerId}/auctions/listings -- verify access
POST /v1/aftermarket/listings/expiry -- create first expiry

Endpoints

3 endpoints across 2 groups. See references/api-spec.lap for full details.

customers

Method	Path	Description
GET	/v1/customers/{customerId}/auctions/listings	Get listings from GoDaddy Auctions

aftermarket

Method	Path	Description
DELETE	/v1/aftermarket/listings	Remove listings from GoDaddy Auction
POST	/v1/aftermarket/listings/expiry	Add expiry listings into GoDaddy Auction

Common Questions

Match user requests to endpoints in references/api-spec.lap. Key patterns:

"List all listings?" -> GET /v1/customers/{customerId}/auctions/listings
"Create a expiry?" -> POST /v1/aftermarket/listings/expiry

Response Tips

Check response schemas in references/api-spec.lap for field details
List endpoints may support pagination; check for limit, offset, or cursor params
Create/update endpoints typically return the created/updated object

CLI

# Update this spec to the latest version
npx @lap-platform/lapsh get aftermarket-api -o references/api-spec.lap

# Search for related APIs
npx @lap-platform/lapsh search aftermarket-api

References

Full spec: See references/api-spec.lap for complete endpoint details, parameter tables, and response schemas

Generated from the official API spec by LAP

安全使用建议

Do not trust this skill as-is. Before installing or enabling it, ask the publisher for: (1) the API base URL(s) to be used; (2) explicit authentication requirements (API keys/OAuth) and how they are stored; (3) the references/api-spec.lap file or a link to the official API spec; (4) confirmation that destructive endpoints (DELETE, POST) require and enforce auth. Be aware that SKILL.md suggests running `npx @lap-platform/lapsh` — that will download/execute code from npm, so only run it if you trust the @lap-platform package. If you need this capability, prefer a version that: includes the base URL, documents auth and required env vars, lists required binaries (node/npm) or provides an audited install mechanism, and includes the referenced API spec file. If the publisher cannot supply those, treat the skill as incomplete and potentially unsafe.

功能分析

Type: OpenClaw Skill Name: lap-aftermarket-api Version: 1.0.0 The skill bundle provides documentation and instructions for an AI agent to interact with an Aftermarket API (GoDaddy Auctions) via the LAP platform. It defines three standard REST endpoints and includes CLI commands for updating the API specification using the '@lap-platform/lapsh' package. No indicators of malicious intent, data exfiltration, or prompt injection were found in SKILL.md or _meta.json.

能力评估

⚠ Purpose & Capability

The skill claims to target an Aftermarket API / GoDaddy Auctions endpoints, including DELETE and POST actions. However, it declares no base URL, no authentication, and no required binaries, which is unexpected for an API that appears to perform state-changing operations. The lack of declared dependencies (Node/npm or lapsh) is inconsistent with the CLI usage in the instructions.

⚠ Instruction Scope

SKILL.md instructs the agent to verify access (GET) and to create or remove listings (POST/DELETE) but gives no base URL or auth method. It references a local file (references/api-spec.lap) that is not included and provides npx commands that will fetch remote tooling. The presence of destructive endpoints (DELETE /v1/aftermarket/listings) without authentication details is particularly risky/incoherent.

ℹ Install Mechanism

There is no install spec (instruction-only), which is low risk by itself. However, the README encourages running npx @lap-platform/lapsh, which implies a Node/npm runtime and network access to install packages — yet the skill does not declare these requirements. That mismatch is an omission to be clarified.

⚠ Credentials

The skill declares no required environment variables or credentials and explicitly states "No authentication required." That is surprising for endpoints that modify auctions and likely require API credentials. The absence of any credential requirements is disproportionate and suggests the spec is incomplete or incorrect.

✓ Persistence & Privilege

The skill does not request persistent presence (always:false) and does not claim to modify other skills or system-wide settings. It is user-invocable and allows autonomous invocation per platform defaults, which is normal.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install lap-aftermarket-api
安装完成后，直接呼叫该 Skill 的名称或使用 /lap-aftermarket-api 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of the lap-aftermarket-api skill. - Provides coverage for 3 main endpoints related to Aftermarket and GoDaddy Auctions. - Supports listing, removing, and adding expiry to auction listings. - No authentication required for API access. - Includes CLI commands for updating and searching the API spec. - Documentation points to references/api-spec.lap for detailed endpoint information.

元数据

Slug lap-aftermarket-api

版本 1.0.0

许可证 MIT-0

累计安装 1

当前安装数 1

历史版本数 1

常见问题