← 返回 Skills 市场
343
总下载
0
收藏
3
当前安装
1
版本数
在 OpenClaw 中安装
/install neckr0ik-api-wrapper
功能描述
Convert any REST API into an OpenClaw skill automatically. Generates SKILL.md, scripts, and claw.json from OpenAPI spec or URL. Use when you want to quickly...
安全使用建议
This tool looks coherent for its purpose, but review a few things before using: 1) SKILL.md refers to a CLI name (neckr0ik-api-wrapper) while the bundle contains generator.py — you may need to run the script with Python rather than a preinstalled CLI. 2) Generated skills will require you to supply API credentials (API keys, bearer tokens, OAuth) — never paste sensitive credentials without reviewing the generated code and intended endpoints first. 3) The generator will fetch whatever OpenAPI URL you provide and may make test calls to the target API — only point it at trusted endpoints. 4) Inspect the generated SKILL.md and scripts (especially any generated client code) before running them to ensure they don’t override local files you care about. If you want higher confidence, provide the rest of generator.py (it was truncated) so it can be fully reviewed for hidden network calls or unexpected behavior.
功能分析
Type: OpenClaw Skill
Name: neckr0ik-api-wrapper
Version: 1.0.0
The skill is a utility for generating OpenClaw skills from OpenAPI specifications, but it contains a code injection vulnerability in `scripts/generator.py`. The generator embeds strings from untrusted API specs (such as `base_url`, `title`, and `description`) directly into f-strings used to create the generated `api.py` client without sufficient sanitization. While no intentional malice is evident, a specially crafted OpenAPI spec could lead to the generation of a malicious Python script that executes arbitrary code when the generated skill is used.
能力评估
Purpose & Capability
The name/description (generate OpenClaw skills from OpenAPI) align with the included generator.py and SKILL.md. The code reads OpenAPI specs (local or remote), parses auth info and endpoints, and writes SKILL.md, claw.json, and scripts — exactly the stated capability.
Instruction Scope
SKILL.md instructs CLI usage (neckr0ik-api-wrapper generate/validate/test). The repository includes a generator.py script (no explicit CLI installer); this is a minor mismatch (docs imply a packaged CLI). The runtime instructions focus on fetching/parsing OpenAPI specs and generating files and do not instruct reading unrelated system files or exfiltrating secrets. Generated skills will rely on user-supplied API credentials to test/call endpoints — expected for the purpose.
Install Mechanism
No install spec; this is an instruction-only skill with an included Python script. Nothing is downloaded or extracted at install time. Generator fetches user-specified OpenAPI URLs at runtime (expected). No external install URLs or archive extraction are present.
Credentials
The skill declares no required environment variables or credentials. The generator inspects API security schemes and generates guidance to configure API keys / bearer tokens for the generated skill — appropriate for a wrapper generator. It does not request unrelated service credentials.
Persistence & Privilege
always:false (default) and autonomous invocation not disabled — normal for user-invocable skills. The generator writes files into the chosen output directory (expected behavior) and does not claim system-wide or other-skills configuration privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install neckr0ik-api-wrapper - 安装完成后，直接呼叫该 Skill 的名称或使用
/neckr0ik-api-wrapper触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of neckr0ik-api-wrapper.
- Automatically generates OpenClaw skills from any REST API's OpenAPI spec or URL.
- Creates SKILL.md, scripts (type-safe API client), and claw.json.
- Supports multiple authentication types: API key, Bearer, Basic Auth, and OAuth2.
- Includes commands to generate, validate, and test skills.
- Outputs well-structured, documented, and ready-to-use OpenClaw skills.
元数据
常见问题
Neckr0ik Api Wrapper 是什么？
Convert any REST API into an OpenClaw skill automatically. Generates SKILL.md, scripts, and claw.json from OpenAPI spec or URL. Use when you want to quickly... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 343 次。
如何安装 Neckr0ik Api Wrapper？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install neckr0ik-api-wrapper」即可一键安装，无需额外配置。
Neckr0ik Api Wrapper 是免费的吗？
是的，Neckr0ik Api Wrapper 完全免费（开源免费），可自由下载、安装和使用。
Neckr0ik Api Wrapper 支持哪些平台？
Neckr0ik Api Wrapper 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Neckr0ik Api Wrapper？
由 Neckr0ik（@neckr0ik）开发并维护，当前版本 v1.0.0。
推荐 Skills