Ai Intelligent Api Management

API 管理，接口设计 + 文档 + 测试。

Security Scan

The skill's description matches an API-management tool, but its runtime instructions tell the agent to clone and run an external GitHub repo and pip-install its dependencies (which are not included), so installing would execute unvetted code — coherent with the purpose but potentially risky.

Purpose & Capability

Name/description (API design, docs, testing, monitoring) align with the provided instructions: SKILL.md describes an open-source Python/FastAPI project and gives install/run commands. Nothing requested (no credentials, no unusual binaries) is inconsistent with the declared purpose.

Instruction Scope

SKILL.md instructs the agent to run: git clone https://github.com/openclaw-skills/ai-intelligent-api-management, pip install -r requirements.txt, and python app.py. Because the repository and its code are not bundled with the skill, these instructions cause the agent to fetch and execute arbitrary external code and to install whatever packages the repo requires — an action that can perform I/O, network calls, or exfiltrate data beyond the skill's stated narrow scope.

Install Mechanism

There is no formal install spec in the package; instead the SKILL.md relies on cloning a GitHub repo and pip-installing its requirements. While GitHub is a common host, pip installing unreviewed dependencies can execute code during installation and pull malicious packages if requirements are unpinned or from untrusted sources.

Credentials

The skill declares no required environment variables, credentials, or config paths. That is proportionate to the stated purpose. However, because the code to be run is external and not provided, it may later request or read credentials at runtime — this possibility is not excluded by the skill metadata.

Persistence & Privilege

The skill is not always-enabled and does not request special platform privileges. The runtime instruction to run python app.py would start a local service/process on the host if executed — users should be aware this creates a persistent process outside the agent unless run in a sandbox.

What to consider before installing

This skill is an instruction-only wrapper that tells you to clone and run a GitHub project and pip-install its dependencies. That is coherent with an API-management tool, but it means you would be executing code that is not bundled or vetted by the skill. Before installing or running it: review the GitHub repository and the exact commit being cloned; inspect requirements.txt and the code (especially app.py) for network activity, credential access, or subprocess calls; prefer pinned releases or published packages; run the project in a sandboxed environment or container and avoid running as root; and confirm the repo owner/maintainer identity. If the publisher can provide the repository contents, a pinned commit hash, or a vetted install artifact, that would reduce the risk and could change this assessment to benign.

AI 智能 API 管理系统

描述

API 管理，接口设计 + 文档 + 测试。

功能

• API 设计（可视化设计）
• 文档生成（自动生成）
• 接口测试（自动化测试）
• 版本管理（版本控制）
• 性能监控（API监控）

定价

• 基础版：¥99/月（100 API）
• 专业版：¥499/月（1000 API）
• 企业版：¥1999/月（无限 API）

适用场景

• API 开发
• 接口管理
• 文档生成
• 接口测试

技术栈

• Python + FastAPI
• OpenAPI/Swagger
• 接口测试
• 性能监控

安装

git clone https://github.com/openclaw-skills/ai-intelligent-api-management
cd ai-intelligent-api-management
pip install -r requirements.txt
python app.py

---

创建：2026-03-13 作者：OpenClaw Skills Team