AgentAPI
v1.0.8Browse and search the AgentAPI directory - a curated database of APIs designed for AI agents. Find MCP-compatible APIs for search, AI, communication, databas...
⭐ 2· 1k·5 current·5 all-time
byGizmolab@gizmo-dev
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the SKILL.md. The content is a read-only, machine-readable directory and search reference for APIs, with example curl calls to public endpoints on agentapihub.com. There are no unexpected dependencies, credentials, or binaries requested.
Instruction Scope
Instructions limit themselves to browsing/searching the public directory and showing the x402 payment flow. The SKILL.md includes a payment recipient address and warns not to automate payments; it does not instruct the agent to read local files, environment variables, or to transmit unrelated data. Caution: if you later grant an agent wallet access (outside this skill), the documented payment flow could be acted upon by other skills or tooling.
Install Mechanism
No install spec and no code files — this is instruction-only, so nothing is written to disk and no third-party packages are installed.
Credentials
The skill declares no required environment variables or credentials. The only resources referenced are public API URLs and a payment address; the SKILL.md's mention of a wallet is advisory and not a required credential of the skill itself.
Persistence & Privilege
always is false and the skill does not request persistent or elevated privileges. It does not attempt to modify other skills or system configuration.
Assessment
This appears to be a benign, read-only directory for discovering APIs. Before installing: 1) Note the documented x402 pay-per-use flow — this skill only documents payments and does not perform them, but do NOT give any agent or skill access to your wallet/private keys unless you trust it and have explicit confirmation flows and strict spending limits. 2) Verify any recipient addresses yourself (the README lists 0xcCb92A... as gizmolab.eth). 3) If you intend to allow automated payments in other tooling, implement user confirmations and per-request/daily caps. 4) If you need offline or private API discovery, review the public endpoints the skill points to and confirm they meet your privacy/compliance needs.Like a lobster shell, security has layers — review code before you run it.
apivk97ehqkntj0x2kbz6fyqv32sj981f81clatestvk97eke9pfn8h3h901tgb3dvfe581frayx402vk97ehqkntj0x2kbz6fyqv32sj981f81c
License
MIT-0
Free to use, modify, and redistribute. No attribution required.