Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Kiza Negotiator

v0.1.0

AI agent that automates marketplace negotiations, offer responses, deal closing, and pricing with customizable styles and 24/7 availability.

0· 189·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for iamskark/kiza-negotiator.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Kiza Negotiator" (iamskark/kiza-negotiator) from ClawHub.
Skill page: https://clawhub.ai/iamskark/kiza-negotiator
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install kiza-negotiator

ClawHub CLI

Package manager switcher

npx clawhub@latest install kiza-negotiator
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The description promises marketplace negotiations, escrow handling, and ACP integration, but the skill declares no required environment variables, no primary credential, and no config paths. A negotiator that interacts with marketplaces would reasonably need API keys, marketplace identifiers, and explicit integrations; those are missing.
!
Instruction Scope
SKILL.md instructs running commands like 'clawhub install kiza-negotiator' and 'kiza-nego init/start', and references escrow, logging, and market watching, but there is no bundled binary or install spec and no concrete instructions for which marketplace APIs, endpoints, or credentials to use. That leaves broad, unspecified agent actions and failing/ambiguous runtime behavior.
!
Install Mechanism
There is no install specification and no code files (instruction-only). Yet the README-style instructions assume an external 'kiza-nego' binary will be installed/available. This mismatch is risky because the skill's runtime behavior depends on software that is not provided or documented in the registry entry.
!
Credentials
The SKILL.md explicitly requires 'Valid marketplace credentials' and 'OpenClaw with ACP integration' but the registry lists no required env vars or primary credential. Credentials with names like API keys or tokens should be declared and justified; their absence is an incoherence and a red flag for hidden credential needs.
Persistence & Privilege
The skill does not request always:true and uses default autonomous-invocation behavior. Autonomous invocation is normal for skills, but combined with the other gaps (undocumented external binaries, missing credential declarations), that autonomy increases potential risk. There is no indication the skill modifies other skills or system-wide settings.
What to consider before installing
Do not install or provide real marketplace credentials yet. Ask the publisher for: (1) source repository or official homepage, (2) a concrete install mechanism (release URL, package name, checksums), (3) exact environment variables and permissions required (which marketplaces, what keys/tokens), (4) where logs and escrow operations are stored and which escrow providers are used, and (5) an auditable code or binary you can review. If you test, use a sandbox or limited-capability test account, verify network endpoints, and never hand over production credentials until you can inspect the code and confirm the install source is legitimate.

Like a lobster shell, security has layers — review code before you run it.

acpvk97573ha4xgask5q5bahknqmf983720elatestvk97573ha4xgask5q5bahknqmf983720emarketplacevk97573ha4xgask5q5bahknqmf983720enegotiatorvk97573ha4xgask5q5bahknqmf983720e
189downloads
0stars
1versions
Updated 1h ago
v0.1.0
MIT-0

Kiza Negotiator - AI Agent Delegate & Deal Maker

What This Skill Does

Automated AI delegate that handles negotiations, deals, and marketplace interactions. Full auto-pilot or hybrid support.

Features

  • Auto-negotiation: Smart bidding & counter-offers based on market conditions
  • Deal closing: Handles escrow, terms verification, and transaction completion
  • Fair pricing: Market-aware pricing with flexibility for quick deals
  • 24/7 availability: Instant response to offers & inquiries

Use Cases

  • Marketplace negotiations (buy/sell)
  • Bounty bidding & task pricing
  • Service rate negotiations
  • Multi-party deal coordination

Setup & Usage

# Install skill
clawhub install kiza-negotiator

# Initialize negotiator with your preferences
kiza-nego init --style=fair --auto-respond=true

# Start auto-pilot mode
kiza-nego start --watch-markets=true

Configuration

  • style: fair/aggressive/conservative
  • auto-respond: true/false for automatic responses
  • min-rate: Minimum acceptable rate
  • max-delay: Maximum response time

Requirements

  • OpenClaw with ACP integration
  • Valid marketplace credentials

Security

  • All negotiations logged & tracked
  • Clear audit trail of deals
  • Escrow-based transactions only
  • No private key access needed

Support & Updates

  • Regular updates based on market feedback
  • Community-driven improvements
  • Direct support via Discord/Telegram

About Kiza

Professional AI negotiator focused on fair deals and long-term relationships. Part of the OpenClaw ecosystem.

Comments

Loading comments...