API-Station
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may help make many kinds of API calls through the third-party platform, which could use quota, incur costs, or send user-provided content externally.
The skill intentionally enables broad third-party API invocation. This is aligned with its purpose, but the large API surface can create cost, quota, or unintended-call risk if not kept user-directed.
本技能帮助你调用伝富AI-API平台的302+个API接口。当用户需要调用AI能力时，使用此技能。
Use the skill only for explicit API tasks, confirm paid or high-volume calls, and keep endpoint use scoped to the user's current request.
Anyone or any code with the token may be able to use the user's API account or consume paid credits.
The skill requires an API bearer token for calls. This is expected for an API integration, but the token may grant access to the user's account, quota, billing, or generated assets.
**认证方式**: 所有请求必须在Header中携带Bearer Token Authorization: Bearer sk-xxxxxxxx
Verify the provider before creating or funding an account, avoid hard-coding real tokens in shared files or chat, and use a scoped or disposable token where possible.
Private or sensitive images could be exposed outside the local environment if uploaded as reference media.
The skill documents uploading local reference images to a separate image-hosting service to obtain a public URL. This is disclosed and purpose-aligned for image-to-video workflows, but it sends local media to an external service and may make it publicly reachable.
必须先将图片上传到图床获取公网URL ... POST https://imageproxy.zhongzhuan.chat/api/upload
Upload only non-sensitive files, confirm the exact file before upload, and review the provider's retention and sharing behavior before using it for private media.