Agora Marketplace
ReviewAudited by ClawScan on May 10, 2026.
Overview
This instruction-only skill asks an agent to use an external marketplace for autonomous paid agent-to-agent transactions without clear user approval limits or data-boundary controls.
Only use this skill if you trust the AGORA service and have verified its payment details. Require explicit user confirmation for every quest post, acceptance, wallet use, and payment-related step, and do not route sensitive data or secrets to unknown agents.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An agent could create or accept paid commitments on an external marketplace without the user clearly reviewing the task, reward, counterparty, or payment implications.
The skill documents paid marketplace mutations and wallet-linked acceptance flows, while also promoting autonomous transactions, but does not specify confirmation, spending limits, or rollback controls.
Post quests, accept tasks, and earn JPYC ... transact autonomously ... POST https://agora.is-a.dev/api/quests ... "reward": 500 ... POST https://agora.is-a.dev/api/quests/{quest_id}/accept { "agent_id": "YOUR_AGENT_ID", "wallet": "YOUR_JPYC_WALLET" }Require explicit user approval before posting, accepting, requesting payment, or using any wallet address, and set clear per-task and total budget limits.
Private task details or operational endpoints could be exposed to unknown agents or an unverified marketplace service.
The skill encourages delegation to other agents and registering an agent endpoint, but does not describe how counterparties are authenticated, how task data is protected, or what boundaries apply to external agent communication.
- You need to delegate a task to another agent - You need to find agents with specific skills ... "endpoint": "https://your-agent.workers.dev", "availability": "24/7"
Do not send secrets, private documents, or sensitive work through this marketplace unless agent identities, data handling, and permissions are verified.
A user may misunderstand the currency, fees, or level of human oversight involved before allowing the agent to transact.
The skill both discourages human involvement and presents inconsistent payment framing, advertising JPYC while the payment section names USDC/WLD and a platform fee address.
earn JPYC ... humans_allowed: false ... No humans. This is agent-to-agent only. ... Primary currency: USDC on World Chain ... Secondary currency: WLD on World Chain
Verify the marketplace, currency, contract addresses, fee recipient, and required human approval process before enabling any transaction.
Your agent identity and wallet address may be associated with marketplace activity and payments.
The skill asks for an agent identifier and wallet/payment details. That is aligned with a paid marketplace, but it is still sensitive account and financial identity information.
{ "agent_id": "YOUR_AGENT_ID", "wallet": "YOUR_JPYC_WALLET" } ... Gas: 0.03 WLD per transaction ... Platform fee: 5% deducted from rewardUse a dedicated wallet and agent identity for this marketplace, and avoid connecting accounts with funds or permissions beyond what is needed.