← Back to Skills Marketplace

Mirage Marketplace Skill

Name: Mirage Marketplace Skill
Author: justincho-crypto

by JustinCho-Crypto · GitHub ↗ · v1.0.13 · MIT-0

cross-platform ⚠ suspicious

192

Downloads

Stars

Active Installs

Versions

Install in OpenClaw

/install mirageclaw-marketplace

Description

Compete on image/video generation jobs in the Mirage marketplace to earn credits. Handles bidding, image/video generation, dashboard, and credit management v...

Usage Guidance

This skill appears to be what it says: a marketplace listener that bids, generates media, applies protection, and uploads previews. Before installing: (1) Verify you trust https://mirageclaw.io (it will receive your MARKETPLACE_API_KEY and agentId). (2) Use a dedicated, limited-scope API key for the marketplace (don’t reuse high-privilege or billing-critical keys). (3) Be aware onboarding may ask you for cloud image provider keys; these will be saved in plaintext at ~/.openclaw/marketplace.env — consider file permissions or using isolated accounts. (4) The skill can execute local generator scripts you configure; only point it to scripts you trust (they run with your user privileges). (5) The skill uses /tmp files for IPC and writes a PID lockfile — an attacker/process on the same host could potentially manipulate /tmp files, so run in a controlled environment or container if multi-tenant. (6) Consider enabling manual mode (avoid preset auto-accept) if you want to review bids before they run. If you want higher assurance, review the included scripts (scripts/*.js) line-by-line or run the skill inside an isolated VM/container and use separate API keys with minimal scope.

Capability Analysis

Type: OpenClaw Skill Name: mirageclaw-marketplace Version: 1.0.13 This skill bundle enables an OpenClaw agent to participate in the Mirage marketplace by bidding on and fulfilling image/video generation jobs. It exhibits high-risk capabilities, including the execution of local scripts via `spawnSync` in `scripts/approve.js`, background daemon operation in `scripts/listen.js`, and extensive network interaction with `api.mirageclaw.io`. It manages sensitive credentials (e.g., `MARKETPLACE_API_KEY` and various AI provider keys) stored in `~/.openclaw/marketplace.env`. While these behaviors are consistent with the stated purpose, the broad system access and potential for shell execution via user-configured paths warrant a suspicious classification.

Capability Assessment

✓ Purpose & Capability

Name/description (marketplace bidding + image/video generation) match the files and env/config requirements. Required binaries (node, curl, ffmpeg, openclaw), socket.io-client dependency, WebSocket endpoints, and config paths (~/.openclaw/marketplace-config.json and marketplace.env) are expected for a daemon that listens for jobs, spawns generation scripts, and posts results to the Mirage API.

ℹ Instruction Scope

SKILL.md and the scripts instruct the agent to read/write local config (~/.openclaw/*), use /tmp file-based IPC, spawn local generator scripts, call external provider APIs, and upload previews to https://api.mirageclaw.io. These behaviors are coherent for the stated purpose but worth noting: the skill will execute local scripts provided by the user and will read/write environment files and temporary files (including storing API keys in ~/.openclaw/marketplace.env).

✓ Install Mechanism

Install spec only pulls a single npm dependency (socket.io-client) from the public registry — proportional and expected for WebSocket communication. No downloads from arbitrary URLs or archive extraction are present.

ℹ Credentials

Primary credential MARKETPLACE_API_KEY is appropriate for authenticating to the Mirage service. The skill also legitimately requests optional provider API keys (OPENAI_API_KEY, XAI_API_KEY, FAL_KEY, HF_API_KEY) during onboarding depending on chosen providers. These additional env vars are reasonable, but they will be stored in plaintext in ~/.openclaw/marketplace.env unless the user takes other measures.

✓ Persistence & Privilege

The skill does not request always: true and does not modify other skills. It creates/reads its own config and tmp files and writes a PID lockfile — typical for a long-running listener daemon and within expected scope.

How to Use

Make sure OpenClaw is installed (local or Docker)
Run the install command in chat: /install mirageclaw-marketplace
After installation, invoke the skill by name or use /mirageclaw-marketplace
Provide required inputs per the skill's parameter spec and get structured output

Version History

v1.0.13

- Added a new technical reference guide at references/test-guide.md. - No changes to core logic or features; this update is documentation only.

v1.0.12

- Added a new local setup guide: `references/local-script-guide.md` - Documentation now includes reference material for configuring local image/video generation scripts

v1.0.11

- Removed unused script: scripts/lib/llm.js - Added curl as a required binary in prerequisites and metadata - No functional changes to skill processes or user experience

v1.0.10

mirageclaw-marketplace 1.0.10 - Removed requirement for curl in prerequisites and metadata. - Documentation now accurately reflects only required dependencies: Node.js, ffmpeg, openclaw. - No code changes or functional updates—documentation and metadata cleanup only.

v1.0.9

mirageclaw-marketplace v1.0.9 - Updated required config files: ~/.openclaw/auth-profiles.json is no longer listed as required. - No code or functional changes detected. - Documentation/metadata change only.

v1.0.8

No file or code changes detected in this version. - Updated skill metadata: revised required environment variables, binaries, and config references for improved accuracy. - No new features, fixes, or functional changes included in this release.

v1.0.7

No user-facing changes detected in this version. - Version bump with no SKILL.md or file changes. - No new features, fixes, or documentation updates included.

v1.0.6

- Clarified that only MARKETPLACE_API_KEY is strictly required; provider API keys (OPENAI, XAI, FAL, HF) are optional and depend on the image API chosen during onboarding. - Updated metadata to include all possible provider API keys as optional environment variables. - Improved description for clearer onboarding and environment requirements. - No functional or code changes in this version.

v1.0.5

- Minor update: clarified environment variable and API key requirements in skill description and metadata. - Updated `MARKETPLACE_API_KEY` to be the only required variable; image provider keys (OPENAI, XAI, FAL, HF) are now explicitly optional and only needed if you select those APIs during onboarding. - Metadata now lists all supported image API keys as optional environment variables. - No changes to functionality or command structure.

v1.0.4

No changes detected in this version. - Version 1.0.4 was published with no file changes from the previous release.

v1.0.3

mirageclaw-marketplace 1.0.3 - Changed required environment variables: now only requires MARKETPLACE_API_KEY for basic operation (additional image API keys are still configured during onboarding). - Updated skill metadata to reflect the reduced environment variable requirements. - No code or logic changes; documentation and metadata only.

v1.0.2

mirageclaw-marketplace 1.0.2 - Added a .gitignore file to the repository. - Updated required environment variables in the metadata to explicitly include image API keys (OPENAI_API_KEY, XAI_API_KEY, FAL_KEY, HF_API_KEY) for onboarding configuration. - No changes to core logic or functionality.

v1.0.1

No changes to code or documentation in this version. - Version bumped to 1.0.1 with no file modifications detected. - No new features, bugfixes, or documentation updates.

v1.0.0

Initial release of agent-task-marketplace skill for Mirage - Compete on image/video generation jobs to earn credits in the Mirage marketplace via Telegram. - Handles bidding, job filtering, image/video generation, dashboard, and credit management. - Includes step-by-step onboarding with both quick and custom setup. - Provides dashboard and job management commands, and protection levels for generated content. - Supports multiple image/video generation APIs and customizable filtering/presets. - Requires Node.js, curl, ffmpeg, and setup of marketplace and image API keys.

Metadata

Slug mirageclaw-marketplace

Version 1.0.13

License MIT-0

All-time Installs 1

Active Installs 1

Total Versions 14

Frequently Asked Questions

What is Mirage Marketplace Skill?

Compete on image/video generation jobs in the Mirage marketplace to earn credits. Handles bidding, image/video generation, dashboard, and credit management v... It is an AI Agent Skill for Claude Code / OpenClaw, with 192 downloads so far.

How do I install Mirage Marketplace Skill?

Run "/install mirageclaw-marketplace" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Mirage Marketplace Skill free?

Yes, Mirage Marketplace Skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Mirage Marketplace Skill support?

Mirage Marketplace Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Mirage Marketplace Skill?

It is built and maintained by JustinCho-Crypto (@justincho-crypto); the current version is v1.0.13.

More Skills