Geepers Data

Fetch structured data from 17 authoritative APIs — arXiv, Census Bureau, GitHub, NASA, Wikipedia, PubMed, news, weather, finance, FEC, and more — through a s...

Security Scan

The skill appears to be an instruction-only wrapper for a third‑party aggregator API (api.dr.eamer.dev) but the metadata, naming, and declared requirements are inconsistent and it asks you to provide an API key to an unknown external service — proceed with caution.

Purpose & Capability

The skill claims to provide unified access to 17 authoritative data sources via a single endpoint, which is plausible. However the SKILL.md uses the name 'Dreamer Data' and an api.dr.eamer.dev endpoint while the registry entry is 'Geepers Data' and has no source/homepage. That name/URL mismatch and missing provenance reduce trust.

Instruction Scope

Runtime instructions direct the agent to send GET/POST requests to https://api.dr.eamer.dev and to export a DREAMER_API_KEY. This means user queries (and any data the agent includes in requests) will be transmitted to an external third party. The instructions do not describe data retention, privacy, or rate limits, so sensitive data could be exposed.

Install Mechanism

No install spec and no code files — the skill is instruction-only so it does not write to disk or pull external code during install. That lowers local installation risk, but runtime network calls to a third party remain.

Credentials

Registry metadata lists no required environment variables or primary credential, but the SKILL.md explicitly instructs users to set DREAMER_API_KEY. This mismatch is a red flag: the skill will require a credential to operate but that requirement wasn't declared in the registry metadata (no justification or scope provided for the key).

Persistence & Privilege

always:false and no install/configure steps are present. The skill does not request persistent system presence or elevated privileges in the manifest.

What to consider before installing

This skill calls a third‑party API (https://api.dr.eamer.dev) and asks you to set DREAMER_API_KEY, but the registry shows no source or homepage and the metadata omits the declared API key — that mismatch is suspicious. Before installing: (1) ask the owner for provenance (official homepage, source repo, docs, privacy and retention policy); (2) verify who operates api.dr.eamer.dev and how they handle and store queries and results; (3) do not provide sensitive secrets or personal data to the skill; (4) prefer testing with non-sensitive queries and a throwaway API key; and (5) request that the skill metadata be corrected to declare DREAMER_API_KEY in requires.env and to resolve the name/URL inconsistency. If you cannot verify the operator or privacy practices, avoid using the skill for confidential data.

Dreamer Data

Access 17 structured data sources through https://api.dr.eamer.dev.

Authentication

export DREAMER_API_KEY=your_key_here

Endpoints

List Available Sources

GET https://api.dr.eamer.dev/v1/data

Search Across Sources

POST https://api.dr.eamer.dev/v1/data/search
Body:
{
  "source": "arxiv",
  "query": "machine learning interpretability",
  "limit": 10
}

Available Sources

Source	ID	What it provides
arXiv	arxiv	Academic papers
Census Bureau	census	US demographic data
GitHub	github	Code repositories, issues, users
NASA	nasa	Space data, images, astronomy
Wikipedia	wikipedia	Encyclopedia articles
PubMed	pubmed	Biomedical literature
News	news	Current events from 80+ outlets
Weather	weather	Current and forecast weather
Finance	finance	Stock prices and market data
FEC	fec	Federal campaign finance
OpenLibrary	openlibrary	Books and library records
Semantic Scholar	semantic_scholar	Academic citation graphs
YouTube	youtube	Video metadata
Wolfram Alpha	wolfram	Computational knowledge
Wayback Machine	archive	Web archive snapshots
Judiciary	judiciary	US court records
MAL	mal	Anime and manga data

When to Use

• Research that needs verified, citable data
• Building data pipelines from authoritative sources
• Enriching existing datasets with external context

Don't Use When

• The source you need isn't in the list (check /v1/data first)
• You have direct API access to the source with higher rate limits