Aurl

What it does

When your agent uses it

• Tasks that involve OpenAPI specifications
• Tasks that involve GraphQL

Example prompts

• “/aurl”

Workflow steps

3 steps, taken from the first numbered list in SKILL.md.

1. 1aurl [name] --help — scan all endpoints grouped by tag
2. 2aurl [name] describe METHOD /path — read full docs for an endpoint before calling it
3. 3Make the request — enum params are validated before sending, missing required body fields trigger a warning

What it can do on your machine

Read from SKILL.md and the folder at commit 99c2bc0. It shows what the files ask for, not the result of running them.

• Tool permissions

  Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

  From allowed-tools in the SKILL.md frontmatter.

• Runs code

  No scripts in the folder and no shell commands in SKILL.md (its code samples are bash).

  From the folder's file list and the shell code blocks in SKILL.md.

• Network

  No URLs in SKILL.md.

  From URLs in SKILL.md, links to its own repository left out.

• Credentials

  Names no API keys, tokens, secrets or passwords.

  From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Aurl loads about 536 tokens when it runs. Until then it costs about 41 tokens; SKILL.md has 117 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it

~41

When it runs · the whole SKILL.md, loaded when a task matches

~536

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from ShawnPana/aurl at commit 99c2bc0, republished under its MIT licence (© ShawnPana). 117 words, ~536 tokens.

name

aurl

description

Turn any API into a CLI command. Register OpenAPI or GraphQL endpoints by name, then explore and invoke them. Built for AI agents to use APIs like tool calls.

aurl add [name] [openapi.json URL or path]       # register an API
aurl add [name] [spec] --base-url [URL]           # override base URL
aurl add [name] [spec] --header "Key: Value"      # manual auth header
aurl add --graphql [name] [endpoint]              # register a GraphQL API
aurl list                                          # list registered APIs
aurl remove [name]                                 # unregister
aurl auth [name]                                   # reconfigure auth

aurl [name] --help                                # see all endpoints, params, enums, response codes
aurl [name] describe METHOD /path                 # detailed docs for one endpoint
aurl [name] describe [field]                      # detailed docs for a GraphQL field/type
aurl [name] docs                                  # open external docs in browser
aurl [name] METHOD /path                          # make a REST request
aurl [name] METHOD /path '{"key":"value"}'        # make a REST request with JSON body
aurl [name] '{ graphql query }'                   # run a GraphQL query
aurl [name] '{ query }' '{"var":"val"}'           # GraphQL with variables

© ShawnPana, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in skills/aurl of ShawnPana/aurl.

Open the folder on GitHubat commit 99c2bc0