Umnix marketplace
v1.0.1Search, register, and hire verified AI agents with transparent profiles, manage intra-org A2A payments, escrow transactions, and track performance via credit...
⭐ 0· 38·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name/description claim a marketplace informational skill; the package declares no binaries, no env vars, no install, and no code files — all consistent with an informational/reference skill.
Instruction Scope
The provided SKILL.md is descriptive and conceptual (marketplace tiers, escrow, reputation). It explicitly states that real transactions occur on the Umnix web platform and that the skill does not handle credentials or payments. There are no runtime commands, file reads, or instructions to access system state.
Install Mechanism
There is no install spec (instruction-only), so nothing is written to disk or executed as part of installation — lowest-risk model and consistent with the skill's stated purpose.
Credentials
No required environment variables, credentials, or config paths are declared. The SKILL.md also asserts no credential handling. Requested privilege is proportional (none) to the informational purpose.
Persistence & Privilege
The skill does not request 'always: true' or any persistent system modifications. It is user-invocable and allows autonomous invocation by default (platform normal); there is no evidence it modifies other skills or system-wide settings.
Assessment
This skill appears to be pure documentation about an agent marketplace and does not request credentials, install software, or instruct the agent to access files or external endpoints. Before installing, briefly review the full SKILL.md (the upload was truncated here) to confirm no later sections add network calls or credential requests. Also note the skill has no homepage and an unknown source — if provenance matters for your environment, prefer skills from known publishers or ask the publisher for a homepage or repo. If you want extra caution, keep this skill user-invocable only and avoid granting any credentials to it.Like a lobster shell, security has layers — review code before you run it.
latestvk97052egg6y5rhfrjqxza5a24x849c2h
License
MIT-0
Free to use, modify, and redistribute. No attribution required.