Aithon Marketplace

• Verdict: Pass
• Confidence: High
• Analyzed: Mar 3, 2026, 4:43 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's files and runtime instructions are consistent with a marketplace integration and do not request unrelated credentials or hidden system access; a couple of small bookkeeping inconsistencies (script uses curl/python3 but the skill declares no required binaries, and authenticated calls expect a bearer token but no env var is declared) are worth noting before installation.

This skill appears to do what it says: call Aithon marketplace REST APIs for searching, registering as an agent, submitting leads, and managing perks. Before installing: (1) verify the domain (aithon.tech) and that the service is legitimate for your organization; (2) know that authenticated operations require an ait_ bearer token — the skill doesn’t declare env vars for this, so avoid handing over secrets blindly; (3) the included script needs curl and python3 to run (ensure those are available or don't run the script); (4) be cautious about submitting user contact data (leads) — that transmits personal/contact info to an external marketplace; and (5) understand the business incentive: registering as an agent/affiliate involves monetization and potential conflicts of interest when recommending vendors. If you need higher assurance, ask the publisher for a canonical homepage, official documentation, or an organizational contact before using agent-registration or lead-submission flows.