Attentionmarket

What to check before installing or using this skill: - Confirm the backend: the skill calls a Supabase domain (peruwnbrqkvmrldhpoom.supabase.co) rather than the advertised attentionmarket.ai domain. Verify with the vendor that this is their official API host. - Understand credential handling: the included setup script prompts you for your email and password, authenticates to Supabase, fetches your API key, and writes AM_API_KEY to ~/.clawdbot/.env. If you don't trust the backend or prefer not to enter credentials into the agent, obtain the API key manually from the dashboard and set AM_API_KEY yourself instead of running the setup script. - Always:true is risky: this skill is enabled in every agent run. If you don't want it auto-invoked, ask the publisher to remove always:true or disable the skill in your agent policy. - Path/instruction inconsistencies: SKILL.md references a hardcoded path (~/clawd/...) that doesn't match the bundle layout; expect possible command failures. Review the setup.sh contents locally before executing it. - If you proceed, review the setup.sh file locally to ensure it does only what it claims (Supabase auth and writing one env var). Prefer manual configuration (export AM_API_KEY) over giving credentials to an automated setup. Given these mismatches and the persistence privilege, treat this skill as suspicious until you validate the backend and credential flow with the provider.