api-mock-generator
v1.0.0Generate mock API servers from OpenAPI 3.x and Swagger 2.0 specs. Use when creating mock/stub APIs for frontend development, testing, demos, or CI. Generates...
⭐ 0· 20·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the included Python script and SKILL.md. The code implements OpenAPI/Swagger parsing and mock data generation; no unrelated services, cloud APIs, or credentials are requested.
Instruction Scope
Runtime instructions are limited to running the included Python script (serve/generate/routes/sample) against a local spec file. The instructions do not ask the agent to read unrelated system files, environment variables, or transmit data to external endpoints. Note: YAML support requires PyYAML if you provide YAML specs (the script warns and exits if not installed).
Install Mechanism
No install spec is provided (instruction-only). The bundle contains the runnable Python script only; nothing is downloaded or extracted during install.
Credentials
The skill declares no environment variables, credentials, or config paths. The script does not reference external secrets or request unrelated tokens.
Persistence & Privilege
always is false and the skill does not request persistent/privileged presence or modify other skills or system-wide settings. It runs as a normal user-space script (binds to host/port when serving).
Assessment
This appears to be a straightforward local mock-server generator. Before running: (1) review the script if you plan to run it on a shared or production host; it binds to a host/port and will serve generated responses. (2) If you use YAML specs, installing PyYAML (pip install pyyaml) is required — installing packages pulls code from PyPI, so do that in a controlled environment if concerned. (3) The responses may contain external image URLs (picsum.photos) which cause clients to make outbound requests if fetched; run in an isolated network if you want no outbound traffic. (4) For large specs or public deployment, validate routing and CORS settings to avoid exposing sensitive data. Overall the skill is internally consistent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk974hk629mtw0s3773n6mwfsps84m485
License
MIT-0
Free to use, modify, and redistribute. No attribution required.