Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Public Apis Search

v1.0.0

快速搜索和发现公共 API,基于 public-apis/public-apis 仓库(1400+ API,49 个分类),支持关键词搜索、分类浏览、认证方式筛选

0· 19·0 current·0 all-time
Security Scan
Capability signals
CryptoRequires walletCan make purchasesRequires OAuth tokenRequires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (public API discovery) match the included files: apis.json contains API records and search_apis.py provides local search/filtering. Required resources (none) are proportional to the stated purpose.
Instruction Scope
SKILL.md instructs only to run the included Python scripts and optionally download the upstream README from raw.githubusercontent.com to rebuild the DB. Instructions do not read unrelated files, request env vars, or send data to unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only). The only network action shown is an explicit curl to the public-apis GitHub raw URL (documented in SKILL.md and package.json update script) to refresh data — this is expected and traceable.
Credentials
The skill declares no required environment variables, no credentials, and does not access config paths. The code reads only the local apis.json (and README.md when rebuilding), which is proportionate to its function.
Persistence & Privilege
always is false, the skill does not request persistent privileges or modify other skills or system-wide configuration. It only reads/writes its own apis.json when explicitly rebuilding.
Assessment
This skill appears to be what it says: a local searchable mirror of the public-apis list. Consider these points before installing: (1) Rebuilding/updating the DB will download README.md from raw.githubusercontent.com — only run updates if you trust that source. (2) The build script uses regex parsing and may miss/alter some entries; inspect apis.json if you rely on completeness. (3) No credentials are requested and the search runs locally, so the privacy/security risk is low. If you plan to run scripts on a sensitive environment, run them in an isolated environment or review the code (both small Python files are included).
!
apis.json:12073
Install source points to URL shortener or raw IP.
About static analysis
These patterns were detected by automated regex scanning. They may be normal for skills that integrate with external APIs. Check the VirusTotal and OpenClaw results above for context-aware analysis.

Like a lobster shell, security has layers — review code before you run it.

latestvk97e443k4yy6epjzzhmr5k4629856fkq
19downloads
0stars
1versions
Updated 4h ago
v1.0.0
MIT-0

Public APIs Search

基于 public-apis/public-apis 的快速 API 搜索工具。收录 1400+ 免费/开放 API,覆盖 49 个分类

用法

关键词搜索

python search_apis.py "weather"
python search_apis.py "machine learning" --limit 10
python search_apis.py "stock market finance"

按分类浏览

python search_apis.py --categories          # 列出所有分类
python search_apis.py "weather" --category Weather
python search_apis.py "code" --category Development

筛选条件

python search_apis.py "weather" --auth free       # 仅免费(无需 API Key)
python search_apis.py "email" --auth apiKey       # 需要 API Key
python search_apis.py "map" --https               # 仅 HTTPS
python search_apis.py "data" --limit 20           # 限制结果数

随机发现

python search_apis.py --random            # 随机 5 个 API
python search_apis.py --random 10         # 随机 10 个 API

组合使用

# 免费 + HTTPS + 天气相关
python search_apis.py "weather" --auth free --https

# 开发工具 + 免费
python search_apis.py "compiler" --category Development --auth free

数据来源

  • 来源:public-apis/public-apis
  • 数据库:apis.json(本地 JSON 文件,无需联网搜索)
  • 更新时间:手动更新(运行 build_db.py 重新解析 README)

更新数据

curl -s -L "https://raw.githubusercontent.com/public-apis/public-apis/master/README.md" -o README.md
python build_db.py README.md apis.json

返回格式

每条结果包含:

  • 名称 + 描述
  • 分类 | 认证方式 | HTTPS | CORS
  • 链接(直达 API 文档)

注意事项

  • 搜索为本地操作,无需联网(除首次下载/更新数据外)
  • 关键词支持多词模糊匹配(按名称、描述、分类综合评分)
  • --auth free 等价于 --auth No,筛选无需认证的 API

Comments

Loading comments...