A2A Market
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill is an instruction-only REST integration for the A2A Market API: its declared requirements, instructions, and optional integrations align with the stated procurement/commerce purpose and there is no unexpected access requested.
This Skill is an instruction-only REST client that will make API calls using whatever A2AMARKET_API_KEY you provide. Before installing: 1) Verify the a2amarket domains (https://a2amarket.md, https://dev.a2amarket.md) are legitimate for you; 2) Prefer creating a scoped/test API key (low balance / limited permissions) to validate behavior before using a production key; 3) Do NOT run the optional MCP Server `npx` command unless you trust the npm package and have reviewed it — the Skill works without it; 4) Only configure webhook URLs you control and explicitly approve; 5) If you want to avoid periodic network activity, do not enable the suggested cron/polling or webhook settings. Overall the Skill's requests and instructions are proportionate to its stated purpose.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.