boxed-curlRun curl requests safely in a sandbox, supporting GET/POST/HTTP headers, with complete network isolation.
Install via ClawdBot CLI:
clawdbot install guyoung/boxed-curlGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
POST → https://httpbin.org/postCalls external URL not in known-safe list
https://api.github.com`Uses known external API (expected, informational)
api.github.comAI Analysis
The skill's core function is to make HTTP requests, so external API usage is expected and consistent with its purpose. The 'UNKNOWN_DATA_SINK' signal for POST to httpbin.org appears to be a standard testing endpoint, not evidence of malicious exfiltration. The primary risk is the inherent risk of any tool that makes network requests, which is properly sandboxed.
Generated May 22, 2026
Run curl requests in a sandbox to test APIs without exposing the system to network threats. The sandbox isolates network access and prevents accidental data leaks.
Securely fetch data from public APIs like GitHub or weather services using boxed curl. The sandbox ensures that sensitive internal services are not exposed.
Integrate boxed curl into CI/CD pipelines to perform safe health checks on endpoints. The sandbox prevents pipeline execution from compromising production networks.
Use boxed curl to send requests to unknown or untrusted endpoints during security analysis without risking the researcher's environment. Network isolation protects internal assets.
Allow users to trigger HTTP requests from a web application (e.g., webhook testers) via boxed curl, ensuring that requests are sandboxed and cannot access internal resources.
Offer a service that lets developers test their APIs from a sandboxed environment. Revenue could come from subscription fees based on request volume or features like custom headers.
Provide a platform where users can test webhooks safely using boxed curl. Revenue could be generated through monthly plans or pay-per-use for advanced options like response analysis.
Integrate boxed curl into SaaS products to give users the ability to make HTTP requests without exposing the core infrastructure. Revenue can come from licensing the feature per deployment.
💬 Integration Tip
Ensure the required openclaw-wasm-sandbox plugin is installed and the WASM file is downloaded before any run. Always set allowedOutboundHosts based on the target URL to enforce network isolation.
Scored May 22, 2026
Audited Apr 17, 2026 · audit v1.0
API reference for CoinMarketCap DEX endpoints including token lookup, pools, transactions, trending, and security analysis. Use this skill whenever the user...
Use when designing REST or GraphQL APIs, creating OpenAPI specifications, or planning API architecture. Invoke for resource modeling, versioning strategies, pagination patterns, error handling standards.
ServiceNow IT Service Management integration with API key authentication. Manage incidents, problems, change requests, tasks, CMDB records, service catalog i...
This skill should be used when writing documentation for codebases, including README files, architecture documentation, code comments, and API documentation. Use this skill when users request help documenting their code, creating getting-started guides, explaining project structure, or making codebases more accessible to new developers. The skill provides templates, best practices, and structured approaches for creating clear, beginner-friendly documentation.
API Design Reviewer
Cut AI token costs by 60-85% with deterministic query validation and intelligent caching. Standalone or integrates with Company Brain Core OS. Free, open-sou...