MindStudio To API Custom Function Skill
v1.1.0Build a complete MindStudio Run Function integration for any API the user wants to connect. Use this skill whenever the user mentions MindStudio, wants to co...
⭐ 1· 162·0 current·0 all-time
bySol Farahmand@sol1986
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions and examples: the skill's goal is to produce Code, Configuration, and Test Data for MindStudio Run Functions. It does not request unrelated binaries, credentials, or config paths.
Instruction Scope
SKILL.md stays within the claimed scope (collect API endpoint, auth, fields, response shape, outputs, and execution environment). Minor notes: some examples show fallback reads from ai.vars (e.g. ai.config.symbol || ai.vars.symbol) which is reasonable for optional values but slightly deviates from the strict guidance that inputVariable fields be read from ai.config. Examples also use methods like toLocaleString and btoa which may or may not be available in every execution environment — these are implementation nitpicks rather than scope creep.
Install Mechanism
Instruction-only skill with no install spec and no code files to write; nothing will be downloaded or installed by the registry entry itself.
Credentials
The skill requests no environment variables, no credentials, and no config paths. The guidance to use 'secret' types for API keys and to avoid hardcoding keys is appropriate and proportionate.
Persistence & Privilege
No 'always: true' flag, no requests to modify other skills or system settings. Default autonomous invocation is allowed by platform norms but does not introduce extra privileges here.
Assessment
This skill appears coherent and low-risk: it only provides instructions to generate MindStudio code/config/test-data and asks for the API details it needs. Before using it, avoid pasting real secrets or private API keys directly into chat — instead configure them as 'secret' fields in MindStudio as the templates recommend. Review any generated code before running (especially if you choose the VM environment, which can load npm packages) and test with non-sensitive data first. Watch for hardcoded credentials in output (the skill explicitly warns against this, but always verify). If you need the skill to fetch API docs from a URL, confirm whether the conversation or environment allows that action — the skill expects the user to paste docs rather than autonomously scraping external sites.Like a lobster shell, security has layers — review code before you run it.
latestvk9731vy3qxmkkxcw8qvaawnvhh835ns9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
