Skip to main content

dynamic-api-integration

Enables dynamic discovery and integration of external HTTP APIs using OpenAPI specs, enhancing agent capabilities for real-time data retrieval.

Install this skill

or
0/100

Security score

The dynamic-api-integration skill was audited on May 12, 2026 and we found 53 security issues across 3 threat categories, including 3 critical. Review the findings below before installing.

Categories Tested

Security Issues

medium line 351

Template literal with variable interpolation in command context

SourceSKILL.md
351console.log(\`\${i+1}. \${item.title} — \${item.description?.substring(0, 80)}\`);
medium line 358

Template literal with variable interpolation in command context

SourceSKILL.md
358```bash
critical line 306

Piping content to bash shell

SourceSKILL.md
306| Need raw JSON for further processing | Bash (curl) | Full control, parseable output |
critical line 308

Piping content to bash shell

SourceSKILL.md
308| Need to check HTTP status codes | Bash (curl) | WebFetch abstracts status away |
critical line 309

Piping content to bash shell

SourceSKILL.md
309| Large response (>50KB) | Bash (curl) + truncate | WebFetch may timeout on large pages |
medium line 216

Curl to non-GitHub URL

SourceSKILL.md
216curl -s -X GET "https://api.example.com/data?q=test" \
medium line 223

Curl to non-GitHub URL

SourceSKILL.md
223curl -s -X GET "https://api.example.com/data" \
medium line 230

Curl to non-GitHub URL

SourceSKILL.md
230curl -s -X GET "https://api.example.com/data" \
medium line 237

Curl to non-GitHub URL

SourceSKILL.md
237curl -s -X GET "https://api.example.com/data?q=test"
medium line 245

Curl to non-GitHub URL

SourceSKILL.md
245curl -s -X GET "https://api.example.com/search?q=test&limit=10&page=1" \
medium line 253

Curl to non-GitHub URL

SourceSKILL.md
253curl -s -X POST "https://api.example.com/items" \
medium line 262

Curl to non-GitHub URL

SourceSKILL.md
262curl -s -X PUT "https://api.example.com/items/123" \
medium line 271

Curl to non-GitHub URL

SourceSKILL.md
271curl -s -X DELETE "https://api.example.com/items/123" \
medium line 283

Curl to non-GitHub URL

SourceSKILL.md
283RESPONSE=$(curl -s -w "\n%{http_code}" -X GET "https://api.example.com/search?q=test" \
medium line 451

Curl to non-GitHub URL

SourceSKILL.md
451curl -s -X GET "https://api.github.com/users/octocat/repos?sort=updated&per_page=5" \
medium line 499

Curl to non-GitHub URL

SourceSKILL.md
499curl -s -X GET "https://openlibrary.org/search.json?q=george+orwell&limit=5" \
medium line 507

Curl to non-GitHub URL

SourceSKILL.md
507curl -s https://jsonplaceholder.typicode.com/posts?_limit=5
medium line 510

Curl to non-GitHub URL

SourceSKILL.md
510curl -s -X POST https://jsonplaceholder.typicode.com/posts \
medium line 519

Curl to non-GitHub URL

SourceSKILL.md
519curl -s "https://api.open-meteo.com/v1/forecast?latitude=51.5074&longitude=-0.1278&current_weather=true"
medium line 541

Curl to non-GitHub URL

SourceSKILL.md
541curl -s "https://api.example.com/search?q=test" | node -e "
low line 34

External URL reference

SourceSKILL.md
34This skill teaches agents how to dynamically discover, parse, and call external HTTP APIs at runtime. It is adapted from the [Universal Tool Calling Protocol (UTCP)](https://www.utcp.io/) patterns, tr
low line 80

External URL reference

SourceSKILL.md
80url: "https://api.example.com/openapi.json",
low line 99

External URL reference

SourceSKILL.md
99- `https://api.example.com/openapi.json`
low line 100

External URL reference

SourceSKILL.md
100- `https://api.example.com/swagger.json`
low line 101

External URL reference

SourceSKILL.md
101- `https://api.example.com/v3/api-docs`
low line 102

External URL reference

SourceSKILL.md
102- `https://api.example.com/.well-known/openapi.json`
low line 103

External URL reference

SourceSKILL.md
103- `https://api.example.com/docs` (HTML page may link to spec)
low line 113

External URL reference

SourceSKILL.md
113"base_url": "https://openlibrary.org/search.json",
low line 216

External URL reference

SourceSKILL.md
216curl -s -X GET "https://api.example.com/data?q=test" \
low line 223

External URL reference

SourceSKILL.md
223curl -s -X GET "https://api.example.com/data" \
low line 230

External URL reference

SourceSKILL.md
230curl -s -X GET "https://api.example.com/data" \
low line 237

External URL reference

SourceSKILL.md
237curl -s -X GET "https://api.example.com/data?q=test"
low line 245

External URL reference

SourceSKILL.md
245curl -s -X GET "https://api.example.com/search?q=test&limit=10&page=1" \
low line 253

External URL reference

SourceSKILL.md
253curl -s -X POST "https://api.example.com/items" \
low line 262

External URL reference

SourceSKILL.md
262curl -s -X PUT "https://api.example.com/items/123" \
low line 271

External URL reference

SourceSKILL.md
271curl -s -X DELETE "https://api.example.com/items/123" \
low line 283

External URL reference

SourceSKILL.md
283RESPONSE=$(curl -s -w "\n%{http_code}" -X GET "https://api.example.com/search?q=test" \
low line 296

External URL reference

SourceSKILL.md
296url: 'https://api.example.com/search?q=test',
low line 403

External URL reference

SourceSKILL.md
403Call: GET https://openlibrary.org/search.json?q=1984+george+orwell&limit=5
low line 407

External URL reference

SourceSKILL.md
407Call: GET https://openlibrary.org/works/OL1168083W.json
low line 419

External URL reference

SourceSKILL.md
419Call: GET https://api.github.com/repos/facebook/react/issues?state=open&per_page=10&sort=created
low line 432

External URL reference

SourceSKILL.md
432Call: GET https://newsapi.org/v2/everything?q=AI+safety&sortBy=publishedAt&pageSize=5
low line 451

External URL reference

SourceSKILL.md
451curl -s -X GET "https://api.github.com/users/octocat/repos?sort=updated&per_page=5" \
low line 462

External URL reference

SourceSKILL.md
462"base_url": "https://api.github.com/users/{username}/repos",
low line 499

External URL reference

SourceSKILL.md
499curl -s -X GET "https://openlibrary.org/search.json?q=george+orwell&limit=5" \
low line 507

External URL reference

SourceSKILL.md
507curl -s https://jsonplaceholder.typicode.com/posts?_limit=5
low line 510

External URL reference

SourceSKILL.md
510curl -s -X POST https://jsonplaceholder.typicode.com/posts \
low line 519

External URL reference

SourceSKILL.md
519curl -s "https://api.open-meteo.com/v1/forecast?latitude=51.5074&longitude=-0.1278&current_weather=true"
low line 541

External URL reference

SourceSKILL.md
541curl -s "https://api.example.com/search?q=test" | node -e "
low line 634

External URL reference

SourceSKILL.md
634- [Universal Tool Calling Protocol (UTCP)](https://www.utcp.io/) — open standard for AI agent tool calling
low line 637

External URL reference

SourceSKILL.md
637- [OpenAPI Specification 3.1](https://spec.openapis.org/oas/v3.1.0.html) — API description standard
low line 638

External URL reference

SourceSKILL.md
638- [OpenAPI Best Practices](https://learn.openapis.org/best-practices.html) — community guidelines
low line 640

External URL reference

SourceSKILL.md
640- [API Integration Patterns (2026)](https://composio.dev/blog/apis-ai-agents-integration-patterns) — pattern taxonomy
Scanned on May 12, 2026
View Security Dashboard
Installation guide →