
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
public-api-toolkit
Advanced tools
43 agent skills for real-time public data. Free. No keys. Token-efficient.
why use many API when few skill do trick
43 agent skills. One install. Zero config. No keys.
Weather, crypto, currency, Wikipedia +39 more. Free. Token-efficient.
| Before | After |
|---|---|
| Web search → scrape → parse | API → JSON |
| 500-2000 tokens | 50-100 tokens |
| minutes | <300ms |
10-40x fewer tokens. Replaces expensive web searches with structured data.
gemini extensions install https://github.com/nikhilreddy3888/public-api-toolkit
claude plugin marketplace add nikhilreddy3888/public-api-toolkit
openclaw plugins install https://github.com/nikhilreddy3888/public-api-toolkit
codex install-skill https://github.com/nikhilreddy3888/public-api-toolkit
Weather, Crypto, Currency, Wikipedia, Geocoding, IP Geolocation, Country Data, Dictionary, Books, Translation, News, Movie/TV, Food/Recipes, Math, Space, Holidays, Transport, Random Facts, Animals, Name Insights, Security Intel, Job Search, Air Quality, HTTP Utils, DNS, Dev Tools, Tech News, Travel, Market Brief, Compare, Email Validation, URL Scan, MAC Vendor, Anime, Pokemon, Horoscope, Science Facts, Entertainment, Mock Data, Avatars, Profanity Filter, Coding Contests.
Public API Toolkit is a collection of agent-ready skills. Instead of a complex server, each skill is defined by a simple SKILL.md file that tells the agent how to call an API directly.
skills/
weather/
SKILL.md <-- Definition, API links, and examples
crypto/
SKILL.md
site/
index.html <-- Marketing landing page
styles.css
GEMINI.md <-- Gemini CLI specific context
CLAUDE.md <-- Claude Code specific context
OPENCLAW.md <-- OpenClaw specific context
skills/.SKILL.md file following the standard format (Frontmatter + APIs + Example).MIT
FAQs
43 agent skills for real-time public data. Free. No keys. Token-efficient.
The npm package public-api-toolkit receives a total of 8 weekly downloads. As such, public-api-toolkit popularity was classified as not popular.
We found that public-api-toolkit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.