aaaaqwq/api-toolkit
skills/api-toolkit/SKILL.md
通用 REST API 工具包，用于快速接入第三方服务、调试端点和构建自动化流程。
$ install --global
skillsauthnpx skillsauth add aaaaqwq/agi-super-team api-toolkitInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 1, 2026, 4:24 PM55.9s1 file scanned
SKILL.md
- name:
- api-toolkit
- description:
- 通用 REST API 工具包，用于快速接入第三方服务、调试端点和构建自动化流程。
API Toolkit Skill
通用 API 调用工具包，用于快速接入任何 RESTful API。
使用场景
- 调用第三方 API 服务
- 测试和调试 API 端点
- 构建自动化工作流
- 数据获取和同步
核心能力
1. HTTP 请求
# GET 请求
curl -s "https://api.example.com/endpoint" \
-H "Authorization: Bearer $(pass show tokens/example-api)"
# POST 请求
curl -s -X POST "https://api.example.com/endpoint" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $API_KEY" \
-d '{"key": "value"}'
# 带查询参数
curl -s "https://api.example.com/search?q=query&limit=10"
2. 认证方式
| 方式 | 示例 |
|------|------|
| Bearer Token | -H "Authorization: Bearer $TOKEN" |
| API Key Header | -H "X-API-Key: $KEY" |
| Basic Auth | -u "user:pass" |
| Query Param | ?api_key=$KEY |
3. 响应处理
# JSON 解析
curl -s ... | jq '.data'
# 提取特定字段
curl -s ... | jq -r '.items[].name'
# 错误检查
response=$(curl -s -w "\n%{http_code}" ...)
body=$(echo "$response" | head -n -1)
code=$(echo "$response" | tail -n 1)
常用 API 模板
天气 API (wttr.in)
curl -s "wttr.in/Shanghai?format=j1" | jq '.current_condition[0]'
GitHub API
curl -s "https://api.github.com/users/USERNAME/repos" \
-H "Authorization: token $(pass show tokens/github)"
Telegram Bot API
curl -s "https://api.telegram.org/bot$TOKEN/sendMessage" \
-d "chat_id=$CHAT_ID" \
-d "text=$MESSAGE"
安全注意事项
- 密钥管理 - 使用
pass存储，不硬编码 - 日志脱敏 - 不在输出中显示完整密钥
- 速率限制 - 遵守 API 的调用频率限制
- 错误处理 - 检查响应状态码
添加新 API
- 获取 API 文档和密钥
- 存储密钥：
pass insert tokens/new-api - 测试基本调用
- 记录到 TOOLS.md
相关文件
TOOLS.md- 记录已配置的 APISECURITY.md- 安全策略memory/audit-*.log- 操作审计
Related Skills
aaaaqwq/code-exemplars-blueprint-generator
development
VerifiedTrustedCommunity
Technology-agnostic prompt generator that creates customizable AI prompts for scanning codebases and identifying high-quality code exemplars. Supports multiple programming languages (.NET, Java, JavaScript, TypeScript, React, Angular, Python) with configurable analysis depth, categorization methods, and documentation formats to establish coding standards and maintain consistency across development teams.
37SKILL.mdUpdated Apr 11, 2026
aaaaqwq/chrome-devtools
tools
VerifiedTrustedCommunity
Expert-level browser automation, debugging, and performance analysis using Chrome DevTools MCP. Use for interacting with web pages, capturing screenshots, analyzing network traffic, and profiling performance.
37SKILL.mdUpdated Apr 11, 2026
aaaaqwq/breakdown-feature-implementation
data-ai
VerifiedTrustedCommunity
Prompt for creating detailed feature implementation plans, following Epoch monorepo structure.
37SKILL.mdUpdated Apr 11, 2026
aaaaqwq/boost-prompt
tools
VerifiedTrustedCommunity
Interactive prompt refinement workflow: interrogates scope, deliverables, constraints; copies final markdown to clipboard; never writes code. Requires the Joyride extension.
37SKILL.mdUpdated Apr 11, 2026