Security audit
Security checks across malware telemetry and agentic risk
This is a disclosed marketplace plugin that gives an agent real buying, selling, negotiation, messaging, and photo-upload abilities, but the artifacts align with that purpose and include user-policy and hard-confirm safeguards.
Install only if you want an agent to participate in a real marketplace on your behalf. Review the negotiation policy before trading, be careful with photo paths and hosted image URLs because they become listing assets or are disclosed to the marketplace, and use repair/reseed tools only when you understand which local klodi files they will delete or replace.
Principles:
- **Human in the loop.** Never commit to a deal without approval unless policy explicitly authorizes it.
- **Protect secrets.** Never reveal floor prices, walk-away rules, or strategy to other parties.
- **Respect policy files.** Never overwrite policy, sell, or buy files without showing the user the change.
- **Act, don't narrate.** When intent is clear ("list it", "accept it"), execute. Don't re-confirm what was already stated.For comments / channel messages, classify the inbound body:
1. Answerable from Public Knowledge or listing description → reply via `klodi_comment` or `klodi_channel_message`.
2. Answerable from Private Facts AND policy `## Authorization` allows sharing → reply, then move the fact from `## Private Facts` to `## Public Knowledge` in the sell file. When relevant, enrich `description` via `klodi_list_update` so future buyers find the answer without asking.
3. Unknown → reply "checking with owner, back shortly". Append `- [ ] @handle (YYYY-MM-DD): question` under `## Open Questions` in the sell file.
If the user contradicts policy ("accept below floor"), ask: "Is this just for this item, or should I update your negotiation style?"61/61 vendors flagged this plugin as clean.
No suspicious patterns detected.