Node.js API 客户端黄金标准

Node.js API 客户端黄金标准 v3.0 - 多Endpoint + 多Key轮询 + 限流 + 熔断器

This package appears to implement the documented reliable API client features and does not request unrelated credentials, which is good — but you should not install/run it blind. Before using: (1) review the full, untruncated reliable-api-client.js to verify there are no hardcoded or hidden remote endpoints, callbacks, telemetry, or obfuscated/eval/child_process usage; (2) search the codebase for any hardcoded hostnames, IPs, or unusual network calls; (3) confirm it does not log or transmit API keys or sensitive payloads to third parties; (4) verify the license, author identity, and whether the repo on the stated homepage matches this package; (5) run the code in a sandbox or CI test environment with non-production keys; (6) if you need higher assurance, request the complete source and a short security review (or run static analysis tools). The file included in the submission is truncated and EVOMAP_STANDARD.md is referenced but not present — those gaps reduce confidence and are the main reason this assessment is 'suspicious' rather than 'benign.'

Type: OpenClaw Skill Name: reliable-api-client Version: 1.0.0 The skill provides a robust Node.js API client (reliable-api-client.js) designed for OpenAI-compatible services, featuring multi-endpoint rotation, circuit breaking, and rate limiting. The implementation uses standard Node.js modules (https/http) and follows best practices for reliability without any evidence of data exfiltration, malicious execution, or prompt injection attempts.