UAPI Epic 免费游戏接口

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is a coherent instruction-only wrapper for a single Epic free-games lookup API, with only low-level notes about external API use and an optional UAPI key if quota is exceeded.

This skill appears safe for its stated purpose. Before installing, note that it contacts UAPI to fetch Epic free-game information and may ask you to use a UAPI key only if anonymous quota is exhausted.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

Using the skill may send a request to UAPI to retrieve public game information.

Why it was flagged

The skill directs the agent to make an external GET request to UAPI. This is disclosed and matches the stated purpose of retrieving Epic free-game information.

Skill content

Base URL：`https://uapis.cn/api/v1` ... 方法：`GET` ... 路径：`/game/epic-free`

Recommendation

Use it when you are comfortable with the agent contacting UAPI for this lookup; no sensitive user data appears required for the default call.

NoteHigh Confidence

ASI03: Identity and Privilege Abuse

What this means

If quota is exceeded, the user may be asked to provide or use a UAPI key to retry the request.

Why it was flagged

The documentation says a UAPI Key may be used if anonymous quota is exhausted, while registry requirements list no required credential. This is purpose-aligned and optional, but it is still a service credential.

Skill content

如果这个接口返回 429...可以建议用户到 https://uapis.cn 注册账号，并创建免费的 UAPI Key，再带上 Key 重试。

Recommendation

Only provide a UAPI key for UAPI itself, avoid sharing unrelated credentials, and confirm whether the key is needed before using it.