📚 API Docs Generator — API工具
v1.0.0从代码注释自动生成 API 文档，支持 OpenAPI/Swagger 格式，输出 JSON 或 YAML。
0· 357·1 当前·1 累计
by 安全扫描
OpenClaw
可疑
high confidenceThe skill advertises a full-featured API-docs parser for many frameworks, but the included code is a tiny static shell stub and does not implement the claimed capabilities.
评估建议
This package advertises a powerful automatic API-docs generator but includes only a tiny shell script that emits a static OpenAPI JSON — it does not implement the parsing, framework support, or route detection described. Treat it as a stub or placeholder rather than a working tool. Before installing or running it on real projects: (1) inspect the script (you already can — it's short) to confirm behavior; (2) do not run untrusted tools against sensitive repositories without sandboxing, because a ...详细分析 ▾
⚠ 用途与能力
The SKILL.md describes automated parsing of source comments, route detection, support for many frameworks, OpenAPI/Swagger generation and Postman export. The only code file (api-docs-generator.sh) writes a hard-coded OpenAPI JSON and does not parse input sources or implement any framework-specific logic. The README examples call a command name (api-docs-generator) while the repo supplies api-docs-generator.sh — a naming/installation mismatch. This is disproportionate: the requested/installed artifacts do not match the advertised capability.
ℹ 指令范围
The SKILL.md gives CLI usage examples that would read a source directory and produce documentation, but it does not instruct the agent to read unrelated files, environment variables, or send data externally. However, because the actual script is a stub, the documentation examples are misleading; a user or agent expecting real parsing would be surprised. There are no instructions that clearly exfiltrate data.
✓ 安装机制
No install specification or network downloads are present; the skill is instruction-only with a small bundled shell script. This is low install risk (nothing downloaded from external URLs).
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths. The SKILL.md and the included script do not request secrets or unrelated credentials.
✓ 持久化与权限
The skill does not request always:true or other elevated persistence. It does not modify other skills or system-wide configuration in the provided materials.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/2
- Initial release of api-docs-generator. - Automatically generates API documentation from code comments. - Supports OpenAPI 3.0 and Swagger 2.0 formats. - Outputs documentation in JSON or YAML. - Exports Postman Collections. - Framework support includes Express.js, FastAPI, Flask, Gin, Spring Boot, and Rails.
● 可疑
安装命令
点击复制官方npx clawhub@latest install api-docs-generator
镜像加速npx clawhub@latest install api-docs-generator --registry https://cn.longxiaskill.com