UAPI 步骤2 (方法二): 获取原始文本 接口

使用 UAPI 的“步骤2 (方法二): 获取原始文本”单接口 skill，处理 步骤2 (方法二): 获取原始文本、读取明文、解密文本、按key取原文、端到端加密文本 等请求。 Use when the user wants get clipzy raw, api raw, raw, read raw text...

This skill is coherent and only documents calling GET /api/raw/{id}. Before using it: (1) Treat the decryption key as a secret — avoid pasting it into public chat or logs; passing it in a URL query string can expose it in server logs and referer headers. (2) Prefer providing keys via a secure input mechanism if available (or verify the API supports a safer header/body method). (3) Verify you trust https://uapis.cn and its handling of secrets. (4) If you do not want the agent to make network calls automatically, disable implicit/autonomous invocation in your agent settings before enabling the skill.

Type: OpenClaw Skill Name: uapi-get-clipzy-raw Version: 1.0.0 The skill bundle is a functional wrapper for the Clipzy clipboard API (uapis.cn), but it is classified as suspicious because it implements a high-risk security practice: requiring a Base64-encoded AES decryption key to be passed as a plaintext URL query parameter (`key`). This vulnerability exposes sensitive cryptographic material in network logs, browser history, and server-side metadata. While the behavior is aligned with the stated purpose of the `get-clipzy-raw` endpoint and no evidence of intentional malice or unauthorized exfiltration was found, the inherent design flaw in the API handling sensitive keys warrants a cautious classification.