← 返回 Skills 市场
997
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install qverisai
功能描述
Search and execute dynamic tools via QVeris API. Use when needing to find and call external APIs/tools dynamically — covers weather, search, stocks, finance, economics, geolocation, AIGC, news, social media, health data, and thousands more. Requires QVERIS_API_KEY environment variable.
安全使用建议
This skill appears to do what it says: it needs a QVERIS_API_KEY and calls qveris.ai to discover and run external APIs. Before installing: 1) Confirm you trust qveris.ai (the service will receive your API key and any parameters you pass). 2) Use a scoped, revocable API key and monitor its usage. 3) Do not pass secrets or sensitive PHI/PII as tool parameters unless you are sure the downstream API and QVeris policy permit it. 4) Note a small metadata inconsistency: registry metadata omitted the required env var while SKILL.md and the script require QVERIS_API_KEY — ensure the platform prompts for the key appropriately.
功能分析
Type: OpenClaw Skill
Name: qverisai
Version: 1.0.1
The skill is designed to interact with the QVeris API for dynamic tool search and execution. The `scripts/qveris_tool.mjs` code adheres to the security claims made in `SKILL.md`, specifically that it only accesses the `QVERIS_API_KEY` environment variable and sends it exclusively to `https://qveris.ai/api/v1`. There is no evidence of unauthorized data exfiltration, malicious execution, persistence mechanisms, or obfuscation. While the skill passes user-provided JSON parameters directly to the QVeris API, which could be a vulnerability if the OpenClaw agent does not properly sanitize user input before constructing the `--params` argument, this is a vulnerability in the agent's interaction rather than malicious intent within the skill itself. The skill's behavior is clearly aligned with its stated purpose.
能力评估
Purpose & Capability
The skill's name/description (dynamic tool discovery & execution) matches what it requires and does: it asks for a QVERIS_API_KEY and calls https://qveris.ai/api/v1 to search and execute tools. There are no unrelated credentials or unexpected binaries. Note: registry metadata in the header incorrectly listed no required env vars/primary credential while the SKILL.md and script both require QVERIS_API_KEY — this mismatch should be reconciled.
Instruction Scope
SKILL.md and the included script only read QVERIS_API_KEY, POST to qveris.ai, and print results; they do not read other env vars or local files. However, executing a discovered tool means QVeris (the remote service) may in turn call many third-party APIs (weather, health, finance, etc.). That is expected for an aggregator but means user-provided parameters (which may contain sensitive data) will be sent to the remote service.
Install Mechanism
No install spec; this is instruction-only with a small Node.js script included. No downloads, package managers, or extraction from arbitrary URLs are used. Risk from installation is low.
Credentials
Only one credential (QVERIS_API_KEY) is required, which is proportionate to a remote API aggregator. The SKILL.md declares the key as primary and read-only. Double-check that your API key can be scoped/revoked; avoid sending secrets in tool parameters because those parameters are forwarded to the aggregator and its downstream APIs. Also note the registry header omission of the required env var — ensure the platform will request/store the API key properly.
Persistence & Privilege
The skill is not always-enabled and does not request elevated system privileges or modify other skills. It does not persist credentials to disk in included code. Autonomous invocation is allowed (platform default) but is not combined with other concerning privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install qverisai - 安装完成后，直接呼叫该 Skill 的名称或使用
/qverisai触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
- Added explicit credential and security information, including API key usage, endpoint details, and storage recommendations.
- Introduced "requirements" and "credentials" metadata sections to clarify environment variables, access scope, and endpoint.
- Documentation now clearly states that only the QVERIS_API_KEY is accessed and never logged or stored.
- No changes to feature set or script usage.
v1.0.0
Initial release—enables searching and executing APIs dynamically via QVeris.
- Search and discover thousands of external APIs/tools by capability (weather, finance, AI, etc.)
- Execute chosen tools with custom parameters and get results.
- Node.js script supports search and execution commands directly from the terminal.
- Requires QVERIS_API_KEY environment variable for authentication.
- Includes example queries and usage instructions for quick setup.
元数据
常见问题
QVerisAI 是什么？
Search and execute dynamic tools via QVeris API. Use when needing to find and call external APIs/tools dynamically — covers weather, search, stocks, finance, economics, geolocation, AIGC, news, social media, health data, and thousands more. Requires QVERIS_API_KEY environment variable. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 997 次。
如何安装 QVerisAI？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install qverisai」即可一键安装，无需额外配置。
QVerisAI 是免费的吗？
是的，QVerisAI 完全免费（开源免费），可自由下载、安装和使用。
QVerisAI 支持哪些平台？
QVerisAI 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 QVerisAI？
由 Chris Liu（@chris7iu）开发并维护，当前版本 v1.0.1。
推荐 Skills