🌐 Node.js API Client Gold Standard — API客户端黄金标准
v1.0.0基于 Node.js 的 API 客户端模板，支持多 Endpoint、多 API Key 轮询、限流与熔断器机制，保障高并发调用稳定可靠。
0· 246·1 当前·1 累计
by 下载技能包
最后更新
2026/4/20
安全扫描
OpenClaw
可疑
medium confidenceThe skill's code and instructions mostly match its stated purpose (a multi-endpoint, multi-key reliable API client), but the provided source file is truncated here and there are a few minor inconsistencies and missing artifacts that warrant a cautious review before use.
评估建议
This package appears to implement the documented reliable API client features and does not request unrelated credentials, which is good — but you should not install/run it blind. Before using: (1) review the full, untruncated reliable-api-client.js to verify there are no hardcoded or hidden remote endpoints, callbacks, telemetry, or obfuscated/eval/child_process usage; (2) search the codebase for any hardcoded hostnames, IPs, or unusual network calls; (3) confirm it does not log or transmit API ...详细分析 ▾
✓ 用途与能力
Name/description (multi-endpoint, multi-key, rate limiting, circuit breaker) align with the included code (EndpointManager, rate limiter, connection pool, circuit breaker, backoff). No extraneous services or unrelated credentials are requested.
ℹ 指令范围
SKILL.md is an instruction-only surface that documents usage and references the JS file. It does not ask the agent to read unrelated system files or environment variables. It does reference an 'EVOMAP_STANDARD.md' document that is not included in the package — missing documentation should be checked. The runtime instructions do not appear to instruct exfiltration, but the JS file provided here is truncated so the full runtime behavior (network endpoints, logging of secrets, or hidden callbacks) cannot be fully confirmed.
✓ 安装机制
No install spec is present (instruction-only), and the package contains a single JS file. No downloads from external URLs or package manager installs are specified. This is a low-risk install mechanism, but you should still vet the code before running.
✓ 凭证需求
The skill declares no required environment variables or credentials. The client takes API keys/endpoints via its constructor, which is appropriate for this purpose. There are no extra unrelated secrets requested in manifest or SKILL.md.
✓ 持久化与权限
The skill does not request always:true and defaults to user-invocable/autonomous invocation. There is no indication it modifies other skill configs or requires elevated agent/system privileges in the manifest.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/15
v1.0.0 首发：HTTP 请求重试、超时控制、错误处理、资源清理
● 无害
安装命令
点击复制官方npx clawhub@latest install reliable-api-client
镜像加速npx clawhub@latest install reliable-api-client --registry https://cn.longxiaskill.com