← 返回 Skills 市场
Statamic AI Gateway
作者
Michael Stokoe
· GitHub ↗
· v0.2.0
· MIT-0
171
总下载
1
收藏
0
当前安装
8
版本数
在 OpenClaw 中安装
/install statamic-ai-gateway
功能描述
Manage Statamic content through a tool execution gateway (composer require stokoe/ai-gateway).
安全使用建议
This skill appears to do what it says, but it centralizes per-site bearer tokens in a single local file. Before installing: (1) verify the GitHub homepage/author and that you trust the AI gateway addon running on each site; (2) store sites.json in a protected location and use chmod 600 as recommended; (3) add only sites you control or trust (a malicious site URL/token could be used to extract or modify content); (4) prefer short-lived or scoped tokens if the site supports them and rotate tokens if compromised; (5) keep the agent configured so that any confirmation-gated operations require interactive user approval (do not auto-confirm write operations). If you see any additional install scripts, code files, or requests for unrelated credentials (AWS keys, SSH keys, etc.), stop and re-evaluate — those would change this assessment.
功能分析
Type: OpenClaw Skill
Name: statamic-ai-gateway
Version: 0.2.0
The skill is a well-structured tool for managing Statamic CMS content via a dedicated API gateway (stokoe/ai-gateway). It follows security best practices by instructing the agent to use a local, permission-restricted configuration file (~/.config/ai-gateway/sites.json) for credentials and explicitly mandates a 'discovery-first' workflow with user confirmation for sensitive operations. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found across SKILL.md, INSTALL.md, or the API references.
能力标签
能力评估
Purpose & Capability
Name/description (Statamic AI Gateway) align with the declared requirements: curl/jq and a sites registry containing base_url and token. Requested artifacts (sites.json and AI_GATEWAY_SITES_CONFIG) are exactly what you would expect for a gateway that proxies requests to multiple Statamic sites.
Instruction Scope
SKILL.md explicitly instructs the agent to read the configured sites.json, look up base_url and token, call /capabilities then /capabilities/{tool} before executing, and follow confirmation gates. The instructions do not ask the agent to read unrelated files or credentials; the only secret accessed is the declared sites.json. The guidance is narrow and discovery-first, which limits accidental misuse.
Install Mechanism
This is instruction-only and has no install spec or downloads, so nothing is written to disk by the skill itself. Required binaries (curl, jq) are standard and reasonable for the documented curl-based workflow.
Credentials
The skill asks for a single primary environment variable (AI_GATEWAY_SITES_CONFIG) and a local config path (~/.config/ai-gateway/sites.json) that stores site tokens. That is proportional to its purpose, but be aware this central registry stores bearer tokens that grant management access to each configured site; protecting that file and limiting what sites you add are important operational considerations.
Persistence & Privilege
always is false and the skill is user-invocable with normal autonomous invocation allowed. There is no attempt to modify other skills or persist beyond the documented sites.json; requested privileges are appropriate for operation.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install statamic-ai-gateway - 安装完成后，直接呼叫该 Skill 的名称或使用
/statamic-ai-gateway触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.2.0
statamic-ai-gateway v0.2.0
- No changes were detected in this release.
- All documentation, configuration, and implementation remain the same as in the previous version.
v0.1.0
statamic-ai-gateway v0.0.8
- Documentation rewritten for clarity and brevity; legacy examples and redundant sections removed.
- "Discovery-first" guidance is now prominent; emphasizes using `/capabilities` endpoints before attempting tool use.
- Strict guidance on handling structured ("rich-text") fields—explained in fewer but clearer rules.
- Added quick error code reference table with actionable advice.
- Clarified request/response envelopes and site credential lookup process.
- Notes on cache warming tools (`stache.warm`, `static.warm`) included after bulk updates.
v0.0.6
Version 0.0.7
- Skill description updated for clarity and notes explicit dependency on `stokoe/ai-gateway` (Statamic addon).
- Version number updated in metadata.
- No changes to functionality or endpoints.
- Documentation streamlined; now more concise with clearer prerequisites.
v0.0.5
- Added "Working with Large Content" section to improve handling of bard fields with lots of content
v0.0.4
- Adds new endpoint: `GET /ai-gateway/capabilities/{tool}` for detailed, per-tool usage including argument schemas and behavioral notes.
- Documents a strong workflow for always using per-tool discovery before constructing requests.
- Hardens rules around "structured field values" (e.g. Bard, Replicator) — values are read-only trees; only literal text may be changed, never structure.
- Updates confirmation workflow: tools that require confirmation now mandate explicit user approval before sending the confirmation token.
- Improves documentation and reference flows to clarify best practices and critical error avoidance.
v0.0.3
statamic-ai-gateway v0.0.3 Changelog
- Added new read-only tools: `entry.get`, `entry.list`, `global.get`, `navigation.get`, `term.get`, and `term.list` for retrieving entries, globals, navigations, and taxonomy terms.
- Expanded tool argument documentation with precise envelope shapes and usage examples for each tool.
- Introduced a Tool Argument Quick Reference section for clarity and quick lookup.
- Clarified the multi-step confirmation flow, including how to extract and use the `confirmation_token` from responses.
- Updated and clarified rules and best practices for safer and more predictable use.
v0.0.2
Multi-site management support added.
- Skill now manages multiple Statamic sites via a sites.json registry and the AI_GATEWAY_SITES_CONFIG environment variable.
- Tokens and base URLs are no longer stored in separate environment variables; they're looked up per site.
- Documentation updated with examples and best practices for operating across multiple sites.
- Rules and error handling clarified to emphasize site-specific configuration and traceability.
v0.0.1
Initial public release of statamic-ai-gateway.
- Provides a secure, authenticated HTTP gateway to manage Statamic content, globals, navigation, taxonomy terms, and caches.
- Supports discovery of available tools and safe execution via unified endpoints.
- Detailed environment and request/response envelope documentation included.
- Comprehensive list of tools, error codes, and usage rules for robust operation.
- Requires `AI_GATEWAY_TOKEN` and `AI_GATEWAY_BASE_URL` for authorization.
元数据
常见问题
Statamic AI Gateway 是什么？
Manage Statamic content through a tool execution gateway (composer require stokoe/ai-gateway). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 171 次。
如何安装 Statamic AI Gateway？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install statamic-ai-gateway」即可一键安装，无需额外配置。
Statamic AI Gateway 是免费的吗？
是的，Statamic AI Gateway 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Statamic AI Gateway 支持哪些平台？
Statamic AI Gateway 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Statamic AI Gateway？
由 Michael Stokoe（@michael-stokoe）开发并维护，当前版本 v0.2.0。
推荐 Skills