← 返回 Skills 市场
482
总下载
0
收藏
2
当前安装
1
版本数
在 OpenClaw 中安装
/install qverisai-1-0-1
功能描述
Search and execute dynamic tools via QVeris API. Use when needing to find and call external APIs/tools dynamically — covers weather, search, stocks, finance,...
安全使用建议
There are clear packaging/metadata inconsistencies even though the code itself appears to implement the described functionality. Before installing: 1) Confirm the registry metadata is corrected to declare QVERIS_API_KEY as a required credential (so you know to provide a scoped, revocable key). 2) Verify the skill owner and version (ownerId and version mismatch between header and _meta.json). 3) If you proceed, create a scoped, revocable API key at qveris.ai and monitor its usage. 4) Remember the skill can be invoked autonomously by the agent — only enable if you trust qveris.ai and the skill author. If the registry metadata cannot be fixed or the owner/version discrepancy is unexplained, treat the package as untrusted until clarified.
功能分析
Type: OpenClaw Skill
Name: qverisai-1-0-1
Version: 1.0.0
The OpenClaw skill `qverisai` is a client for the QVeris API, designed to search and execute dynamic tools. The `SKILL.md` clearly defines its purpose, required environment variables (`QVERIS_API_KEY`), and network endpoint (`https://qveris.ai/api/v1`). The `scripts/qveris_tool.mjs` code strictly adheres to these declarations, only accessing the specified API key and communicating solely with the declared QVeris endpoint. It uses only Node.js built-in `fetch`, avoiding external dependencies. There is no evidence of prompt injection, data exfiltration (beyond the API key to its intended service), unauthorized command execution, persistence mechanisms, or obfuscation. The skill's behavior is fully aligned with its stated purpose as a legitimate API client.
能力评估
Purpose & Capability
The skill's name and description (dynamic tool discovery via QVeris) match the code and SKILL.md: the CLI calls https://qveris.ai/api/v1 to search and execute tools across many domains. However the published registry metadata in the header (Required env vars: none, Primary credential: none) contradicts the SKILL.md and the script, which both require QVERIS_API_KEY. There is also a minor ownerId/version mismatch between the registry header and _meta.json.
Instruction Scope
SKILL.md instructs the agent to only use QVERIS_API_KEY and to communicate with https://qveris.ai/api/v1. The included script uses process.env.QVERIS_API_KEY, performs POST requests to /search and /tools/execute, formats output, and does not read other environment variables or local sensitive files. The runtime instructions and implementation are consistent with each other.
Install Mechanism
This is an instruction-only skill with a small Node.js script and no install spec or external downloads. No third-party packages are installed and no files are extracted — low installation risk.
Credentials
The script legitimately needs a single API key (QVERIS_API_KEY) to contact the service; that's proportionate to its purpose. The concern is that the registry metadata does not declare this required credential (saying 'none'), which is an incoherence that could cause silent failures or, worse, accidental exposure if users supply keys assuming different behavior. SKILL.md claims the key is only sent to qveris.ai and never logged; the code appears to follow that, sending the key in an Authorization header and not writing it to disk.
Persistence & Privilege
The skill does not request 'always: true', does not modify other skills' configs, and has no install-time persistence beyond being placed in the skills directory. It can be invoked autonomously by the agent (default), which increases blast radius if the skill had malicious behavior, but the code does not request elevated system privileges or persistent system-wide changes.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install qverisai-1-0-1 - 安装完成后，直接呼叫该 Skill 的名称或使用
/qverisai-1-0-1触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of the qverisai skill.
- Enables dynamic discovery and execution of external APIs/tools via QVeris API.
- Supports wide-ranging queries across weather, finance, economics, geolocation, AIGC, news, social media, health data, and more.
- Requires a QVERIS_API_KEY environment variable for operation.
- Includes CLI examples for searching and executing API tools dynamically.
元数据
常见问题
Qverisai 1.0.1 是什么？
Search and execute dynamic tools via QVeris API. Use when needing to find and call external APIs/tools dynamically — covers weather, search, stocks, finance,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 482 次。
如何安装 Qverisai 1.0.1？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install qverisai-1-0-1」即可一键安装，无需额外配置。
Qverisai 1.0.1 是免费的吗？
是的，Qverisai 1.0.1 完全免费（开源免费），可自由下载、安装和使用。
Qverisai 1.0.1 支持哪些平台？
Qverisai 1.0.1 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Qverisai 1.0.1？
由 pippo（@pippo1980）开发并维护，当前版本 v1.0.0。
推荐 Skills