cURL Command Parser

Overview

Give us the cURL command someone pasted into a ticket and we return what it actually requests: the method, the URL, every header in order, the body, and whether it follows redirects or asks for compression. Credentials are replaced with a placeholder by default, and we tell you where each one was without keeping it. We read a published subset of cURL — one command, quoted arguments, and the common request options — and refuse everything else with a named error rather than guessing: shell operators, variables, command substitution, file reads such as -d @body.json, and options like --proxy. We never run the command and never send the request: no shell starts, no socket opens, no host is looked up, and -L is recorded rather than followed.

A cURL command is how people actually share a request, and reading one by eye is where mistakes happen: a quote in the wrong place, a header that is really two, a token nobody noticed was in the URL. Parsing it into fields makes the request reviewable, and refusing the parts a shell would interpret means a pasted string cannot do anything on the way through.

When to use it

Scope

Non-goals

• Never executes the command, opens a socket, or resolves a host
• Never runs a shell, expands a variable, or substitutes a command
• Never reads a file, cookie jar, netrc, certificate, or standard input
• Does not follow redirects; -L is recorded as followRedirects
• Does not claim full cURL or full Bash compatibility

Properties

Capabilities

Cost & billing

Flat rate per invocation

File handling

How we handle your data

Input schema

Output schema

API contract

curl -sS -X POST "$BASE/v1/execute" -H "Authorization: Bearer $KEY" -H 'Content-Type: application/json' -d '{"skillKey":"network.parse_curl","input":{"curl":"curl -H \"Accept: application/json\" https://example.com/v1/ping"}}'

import { Squillify } from "@squillify/sdk";

const sq = new Squillify({ apiKey: process.env.SQUILLIFY_API_KEY });

const { output } = await sq.execute("network.parse_curl", {"curl":"curl -X POST 'https://api.example.com/v1/orders' -H 'Authorization: Bearer sk-live-not-a-real-key' -H 'Content-Type: application/json' -d '{\"sku\":\"A-1\",\"qty\":2}'"});

Errors

Other limits

Limitations

• Never executes the command, opens a socket, or resolves a host
• Never runs a shell, expands a variable, or substitutes a command
• Never reads a file, cookie jar, netrc, certificate, or standard input
• Does not follow redirects; -L is recorded as followRedirects
• Does not claim full cURL or full Bash compatibility
• Running the request — this skill has no network access at all
• Parsing arbitrary shell scripts or pipelines
• Recovering options outside the published subset, such as --proxy or --cert

How to call

POST /v1/execute (requires authentication)

{
  "skillKey": "network.parse_curl",
  "input": {
    "curl": "curl -X POST 'https://api.example.com/v1/orders' -H 'Authorization: Bearer sk-live-not-a-real-key' -H 'Content-Type: application/json' -d '{\"sku\":\"A-1\",\"qty\":2}'"
  }
}

Examples

{
  "curl": "curl -X POST 'https://api.example.com/v1/orders' -H 'Authorization: Bearer sk-live-not-a-real-key' -H 'Content-Type: application/json' -d '{\"sku\":\"A-1\",\"qty\":2}'"
}

{
  "redactions": [
    "headers[0] Authorization"
  ],
  "_meta": {
    "restrictedGrammar": "curl-subset-v1",
    "tokenCount": 10,
    "redacted": true,
    "headerCount": 2
  },
  "request": {
    "method": "POST",
    "url": "https://api.example.com/v1/orders",
    "headers": [
      {
        "name": "Authorization",
        "value": "<redacted>"
      },
      {
        "name": "Content-Type",
        "value": "application/json"
      }
    ],
    "body": "{\"sku\":\"A-1\",\"qty\":2}",
    "followRedirects": false,
    "compressed": false
  },
  "warnings": []
}

{
  "curl": "curl -L --compressed 'https://example.com/feed?page=2'"
}

{
  "redactions": [],
  "_meta": {
    "restrictedGrammar": "curl-subset-v1",
    "tokenCount": 4,
    "redacted": false,
    "headerCount": 0
  },
  "request": {
    "method": "GET",
    "url": "https://example.com/feed?page=2",
    "headers": [],
    "followRedirects": true,
    "compressed": true
  },
  "warnings": []
}

Recommended use cases

• Turn a cURL command from a bug report into a request an agent can reason about
• Review what a pasted command would send before anyone runs it
• Move a request between tools by parsing it here and rendering it elsewhere

Avoid for

• Running the request — this skill has no network access at all
• Parsing arbitrary shell scripts or pipelines
• Recovering options outside the published subset, such as --proxy or --cert

Related skills

Composable with

Safety & privacy

• Runs without calling any external service.
• Your payloads are never stored permanently.
• Telemetry captures metadata only — never your payload contents.
• We never train models on your payloads.
• No human reviews your payloads.

Tags