← 返回 Skills 市场
340
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install skylv-api-gateway
功能描述
API网关管理。配置和管理API网关，处理流量路由和限流。
安全使用建议
This skill looks like it is meant to manage an API gateway, but its package is just instructions and it omits declaring the credentials and endpoints it will need. Before installing or invoking it: 1) verify the upstream repository (the SKILL.md references a GitHub repo and a 'clawhub install' name) and inspect that code; 2) do not provide secrets (JWT_SECRET, Redis/Envoy admin credentials, Prometheus/Grafana tokens) until you confirm exactly how they are used and stored; 3) ask the author to list all required env vars and the exact network actions the skill will perform; 4) if you must test, do so in an isolated environment with least-privilege credentials. The current mismatch between claimed capabilities and declared requirements is the main risk — it may be sloppy packaging, but it could also lead to accidental exposure of credentials.
功能分析
Type: OpenClaw Skill
Name: skylv-api-gateway
Version: 1.0.0
The skill bundle contains only metadata and documentation (SKILL.md, skill.json, _meta.json) for an API Gateway management tool. No executable code or suspicious instructions were found; the described functionality for traffic routing, rate limiting, and authentication is consistent with the stated purpose.
能力评估
Purpose & Capability
The skill claims to configure/manage an API gateway (Envoy backend, Redis persistence, Prometheus/Grafana monitoring). Managing those systems normally requires connection strings, admin/API credentials, and binaries or network access. The skill's metadata declares no required env vars, binaries, or config paths, which is inconsistent with the stated capabilities. The SKILL.md also provides an example that references ${JWT_SECRET} (an undeclared secret).
Instruction Scope
SKILL.md is instruction-only and defines helper functions (create_gateway, add_route, set_rate_limit, get_metrics) and example configs. It does not instruct the agent to read unrelated local files or exfiltrate data, but it is vague about how to obtain infrastructure endpoints/credentials and what runtime actions (API calls to Envoy/Redis/Prometheus) the agent will perform. That ambiguity could cause the agent to request or be given sensitive credentials at runtime.
Install Mechanism
There is no install spec and no code files included in the package (instruction-only), so nothing is written to disk by default — low immediate install risk. However, SKILL.md suggests using 'clawhub install SKY-lv/api-gateway' and skill.json points to a GitHub repo; this implies an external package exists. The evaluator cannot verify that external source from the provided bundle; users should validate the origin before running any install command.
Credentials
The SKILL.md example references ${JWT_SECRET} and the configuration implies the need for Redis endpoints, Envoy admin access, and monitoring endpoints, but the skill declares none of these required environment variables or credentials. Requesting secrets or access that are not declared is disproportionate and increases risk: an agent might ask the user to provide sensitive credentials or accept insecure defaults.
Persistence & Privilege
The skill does not request persistent installation privileges (always:false) and does not claim to modify other skills or system-wide configuration. The default ability for the agent to invoke the skill autonomously is enabled (disable-model-invocation:false), which is normal — combine this with the above secret-handling concerns when deciding trust.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install skylv-api-gateway - 安装完成后，直接呼叫该 Skill 的名称或使用
/skylv-api-gateway触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Auto
元数据
常见问题
Api Gateway 是什么？
API网关管理。配置和管理API网关，处理流量路由和限流。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 340 次。
如何安装 Api Gateway？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skylv-api-gateway」即可一键安装，无需额外配置。
Api Gateway 是免费的吗？
是的，Api Gateway 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Api Gateway 支持哪些平台？
Api Gateway 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Api Gateway？
由 SKY-lv（@sky-lv）开发并维护，当前版本 v1.0.0。
推荐 Skills