ClawHub

UAPI 程序员历史事件 接口

v1.0.0

使用 UAPI 的“程序员历史事件”单接口 skill，处理 程序员历史事件 等请求。 Use when the user wants get history programmer, history programmer, programmer, or when you need to call GET /his...

⭐ 0· 217·1 current·1 all-time
by速冻饺子@shuakami
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name, description, and included reference files all describe a single UAPI endpoint GET /history/programmer. There are no unrelated environment variables, binaries, or external services declared that would contradict the stated purpose.
✓
Instruction Scope
SKILL.md directs the agent to read local reference docs and to call the public API endpoint (base URL https://uapis.cn/api/v1). It asks the agent to validate parameters and to request a UAPI Key only if the API signals rate limits — no instructions to read arbitrary files, secrets, or system state outside the skill's files.
✓
Install Mechanism
This is instruction-only with no install spec and no code files to write to disk. Lowest-risk install profile.
✓
Credentials
The skill requests no environment variables or credentials up front. It mentions that a UAPI Key might be needed if the endpoint limits anonymous access — that is proportionate and expected for a third-party API wrapper.
✓
Persistence & Privilege
always is false. agents/openai.yaml allows implicit invocation (allow_implicit_invocation: true), which is normal for skills and not a concern by itself. The skill does not request system-wide config changes or persistent privileges.
Assessment
This skill appears coherent and low-risk: it only documents and wraps a public GET /history/programmer endpoint. Before installing, confirm you trust the remote API host (https://uapis.cn) and avoid sending any sensitive or secret data (passwords, API keys, personal identifiers) in requests to that endpoint. Be aware the agent may call the skill autonomously (implicit invocation is allowed); if you require tighter control, restrict autonomous skill use in your agent settings. If you expect to provide a UAPI Key, verify how and where the key will be stored or transmitted by your environment (the skill itself does not declare any storage behavior).

Like a lobster shell, security has layers — review code before you run it.

latestvk979j0wy51g4y3x0h4c9exs2bn82jkxv

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments