Ai Intelligent Ai Model Marketplace

AI 模型市场，模型交易 + 模型评估。

Security Scan

The skill's description (an AI model marketplace) is plausible, but its runtime instructions tell the agent to clone and execute an external GitHub project without declaring required credentials or install metadata, which is disproportionate and risky.

Purpose & Capability

The name and description describe an AI model marketplace (listing, evaluation, trading, deployment). That purpose would normally require payment/provider credentials, cloud deployment access, and storage/back-end integrations — none of which are declared. The SKILL.md points to a GitHub repo to install a full app, which is consistent with delivering such functionality, but it's unusual for an instruction-only skill to require executing external project code without declaring the necessary environment or credentials.

Instruction Scope

The SKILL.md instructs running git clone, pip install -r requirements.txt and python app.py — i.e., download and execute arbitrary code from an external GitHub repository. The instructions provide no guidance about required credentials, ports, configuration files, or what running the app will do. For a marketplace that handles transactions and deployments, instructions that blindly run a third-party app are overly broad and could cause the agent to read/write files, open network ports, or transmit data without declared limits.

Install Mechanism

There is no formal install spec in the skill metadata, but the SKILL.md includes a git clone from github.com/openclaw-skills/ai-intelligent-ai-model-marketplace and pip install. Cloning and running code from a GitHub repo is a moderate-to-high risk install action because arbitrary code will be written to disk and executed. The host is GitHub (a known platform), which is better than a personal URL, but the skill provides no checksum, release tag, or verification instructions.

Credentials

The skill declares no required environment variables or credentials, yet its stated features (trading, settlement, deployment) normally require API keys and payment/provider credentials. The lack of declared env vars combined with instructions to run an external app is a mismatch: either the skill is incomplete (omits required secrets) or it expects to collect/store credentials at runtime, which is not disclosed.

Persistence & Privilege

The skill is not set to always: true, does not declare system-wide changes, and does not request privileged persistence in its metadata. The main privilege risk arises from the install/run instructions (downloading and executing code), not from declared persistent privileges.

What to consider before installing

This skill is an instruction-only listing that tells you to clone and run a GitHub project to get an AI marketplace. Before installing or running it, verify the GitHub repository exists and inspect its code (especially requirements.txt and app.py). Expect that a real marketplace needs payment and cloud credentials — ask the author which secrets are required and how they are stored. Avoid running the provided commands on sensitive machines; use an isolated environment (container or VM) and verify package sources and repository integrity (commit hashes, signatures). If you need the skill to run inside an agent, prefer a version that declares exact install steps, checksums, and required env vars, or request a signed/reviewed package from the publisher.

AI 智能模型市场

描述

AI 模型市场，模型交易 + 模型评估。

功能

• 模型上架（模型发布）
• 模型评估（性能评估）
• 模型交易（在线交易）
• 模型部署（一键部署）
• 收益分成（自动结算）

定价

• 基础版：¥199/月（10 模型）
• 专业版：¥999/月（100 模型）
• 企业版：¥2999/月（无限模型）

适用场景

• 模型交易
• 模型分享
• 模型评估
• 模型部署

技术栈

• Python + FastAPI
• 模型存储
• 交易系统
• 部署引擎

安装

git clone https://github.com/openclaw-skills/ai-intelligent-ai-model-marketplace
cd ai-intelligent-ai-model-marketplace
pip install -r requirements.txt
python app.py

---

创建：2026-03-13 作者：OpenClaw Skills Team