ZapYeti

Use the ZapYeti API to list debts, track balances, view payoff schedules, log payments, and monitor debt-free progress via api.zapyeti.com. Use when the user...

Security Scan

The skill is a minimal, instruction-only wrapper for the ZapYeti REST API and its requirements (curl, python3, ZAPYETI_API_KEY) match the stated purpose.

Purpose & Capability

Name/description match the assets: the skill documents ZapYeti endpoints and includes a helper script that calls api.zapyeti.com. Required binaries (curl, python3) and the single env var ZAPYETI_API_KEY are expected for this purpose.

Instruction Scope

SKILL.md instructs the agent to use scripts/zy_api.sh for API calls. The script only uses the declared ZAPYETI_API_KEY, builds requests to https://api.zapyeti.com, and pretty-prints JSON. There are no instructions to read unrelated files or exfiltrate data to other endpoints.

Install Mechanism

No install spec (instruction-only) and the only code is a small shell helper script; nothing is downloaded or unpacked during install.

Credentials

The skill requires one credential (ZAPYETI_API_KEY) and uses it solely to set the X-API-Key header when calling the ZapYeti API. The credential request is proportional and clearly justified.

Persistence & Privilege

always is false and the skill does not request elevated or persistent system privileges or modify other skills. Autonomous invocation is allowed by default but this skill's actions are limited to API calls.

Assessment

This skill appears coherent and only needs your ZapYeti API key. Before installing, ensure the API key you provide has the minimal permissions needed (avoid full admin keys if possible). Be aware that the API includes endpoints capable of deleting accounts or creating API keys—avoid using overly-privileged keys with third-party agents. Keep your key secret, rotate it if you suspect compromise, and review ZapYeti's API token scopes and retention policies.

Track and manage debt payoff plans on ZapYeti.com via REST API.

Setup

• Requires env: ZAPYETI_API_KEY
• Generate an API key at ZapYeti.com → Settings → API Keys

Usage

Use the helper script for all API calls:

scripts/zy_api.sh <METHOD> <path> [json_body]

Common workflows

List all debts:

scripts/zy_api.sh GET /api/debts/

Get a specific debt:

scripts/zy_api.sh GET /api/debts/DEBT_ID

Log a payment:

scripts/zy_api.sh POST /api/payments/ \
  '{"debt_id":"DEBT_ID","amount":5000,"date":"2026-03-06"}'

Payment summary:

scripts/zy_api.sh GET /api/payments/summary

Payment history:

scripts/zy_api.sh GET /api/payments/history

User profile:

scripts/zy_api.sh GET /api/users/me

Export data:

scripts/zy_api.sh GET /api/settings/export
scripts/zy_api.sh GET /api/settings/export/csv

API Reference

See references/api.md for the full endpoint list including debts, payments, SimpleFin sync, social features, and admin endpoints.

Notes

• Amounts are in cents: $50.00 = 5000
• Debt payoff strategies: snowball (smallest first) and avalanche (highest interest first)