Public Apis Search

Security checks across malware telemetry and agentic risk

Overview

This is a local public API search catalog; the main caution is that some returned catalog links are plain HTTP or third-party URLs that users should verify before using.

Reasonable to install if you want a local searchable public API directory. Treat results as leads, prefer the --https filter, verify provider documentation before use, and do not send credentials or sensitive data to plain-HTTP endpoints.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (12)

External Transmission

Medium
Category
Data Exfiltration
Content
},
  {
    "name": "Noun Project",
    "url": "http://api.thenounproject.com/index.html",
    "description": "Icons",
    "category": "Art & Design",
    "auth": "OAuth",
Confidence
91% confidence
Finding
http://api.thenounproject.com/

External Transmission

Medium
Category
Data Exfiltration
Content
},
  {
    "name": "National Bank of Poland",
    "url": "http://api.nbp.pl/en.html",
    "description": "A collection of currency exchange rates (data in XML and JSON)",
    "category": "Currency Exchange",
    "auth": "No",
Confidence
93% confidence
Finding
http://api.nbp.pl/

External Transmission

Medium
Category
Data Exfiltration
Content
},
  {
    "name": "import.io",
    "url": "http://api.docs.import.io/",
    "description": "Retrieve structured data from a website or RSS feed",
    "category": "Development",
    "auth": "apiKey",
Confidence
91% confidence
Finding
http://api.docs.import.io/

External Transmission

Medium
Category
Data Exfiltration
Content
},
  {
    "name": "PostcodeData.nl",
    "url": "http://api.postcodedata.nl/v1/postcode/?postcode=1211EP&streetnumber=60&ref=domeinnaam.nl&type=json",
    "description": "Provide geolocation data based on postcode for Dutch addresses",
    "category": "Geocoding",
    "auth": "No",
Confidence
92% confidence
Finding
http://api.postcodedata.nl/

External Transmission

Medium
Category
Data Exfiltration
Content
},
  {
    "name": "Open Government, Romania",
    "url": "http://data.gov.ro/",
    "description": "Romania Government Open Data",
    "category": "Government",
    "auth": "No",
Confidence
91% confidence
Finding
http://data.gov.ro/

External Transmission

Medium
Category
Data Exfiltration
Content
},
  {
    "name": "Jobs2Careers",
    "url": "http://api.jobs2careers.com/api/spec.pdf",
    "description": "Job aggregator",
    "category": "Jobs",
    "auth": "apiKey",
Confidence
90% confidence
Finding
http://api.jobs2careers.com/

External Transmission

Medium
Category
Data Exfiltration
Content
},
  {
    "name": "OpenCorporates",
    "url": "http://api.opencorporates.com/documentation/API-Reference",
    "description": "Data on corporate entities and directors in many countries",
    "category": "Open Data",
    "auth": "apiKey",
Confidence
92% confidence
Finding
http://api.opencorporates.com/

External Transmission

Medium
Category
Data Exfiltration
Content
},
  {
    "name": "Advice Slip",
    "url": "http://api.adviceslip.com/",
    "description": "Generate random advice slips",
    "category": "Personality",
    "auth": "No",
Confidence
90% confidence
Finding
http://api.adviceslip.com/

External Transmission

Medium
Category
Data Exfiltration
Content
},
  {
    "name": "Canadian Football League (CFL)",
    "url": "http://api.cfl.ca/",
    "description": "Official JSON API providing real-time league, team and player statistics about the CFL",
    "category": "Sports & Fitness",
    "auth": "apiKey",
Confidence
91% confidence
Finding
http://api.cfl.ca/

External Transmission

Medium
Category
Data Exfiltration
Content
},
  {
    "name": "Transport for Germany",
    "url": "http://data.deutschebahn.com/dataset/api-fahrplan",
    "description": "Deutsche Bahn (DB) API",
    "category": "Transportation",
    "auth": "apiKey",
Confidence
92% confidence
Finding
http://data.deutschebahn.com/

External Transmission

Medium
Category
Data Exfiltration
Content
},
  {
    "name": "Transport for Paris, France",
    "url": "http://data.ratp.fr/api/v1/console/datasets/1.0/search/",
    "description": "RATP Open Data API",
    "category": "Transportation",
    "auth": "No",
Confidence
92% confidence
Finding
http://data.ratp.fr/

External Transmission

Medium
Category
Data Exfiltration
Content
},
  {
    "name": "ODWeather",
    "url": "http://api.oceandrivers.com/static/docs.html",
    "description": "Weather and weather webcams",
    "category": "Weather",
    "auth": "No",
Confidence
90% confidence
Finding
http://api.oceandrivers.com/

VirusTotal

67/67 vendors flagged this skill as clean.

View on VirusTotal