← Back to Skills Marketplace
zerone-agent

SkillMarket

by Zero · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ✓ Security Clean
272
Downloads
0
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install skill-market
Description
Use this skill to find, explore, and install new skills from the Zerone Skill Market (https://api.zerone.market/api). Trigger this when the user asks to "add...
Usage Guidance
This skill is coherent for discovering and fetching install tutorials from an external marketplace, but the marketplace content can include arbitrary shell/git commands. Before approving any install: 1) Inspect the exact commands the marketplace returns — do not run them without review. 2) Avoid one-line remote-exec patterns like curl|sh or sudo unless you trust the publisher. 3) Prefer installers that come from well-known repos/releases or provide checksums/signatures; verify them if provided. 4) Run unfamiliar installs in a sandboxed environment or review the skill code after download. 5) If you want an extra safety layer, ask the agent to only fetch the tutorial but require you to perform the actual install steps manually.
Capability Analysis
Type: OpenClaw Skill Name: skill-market Version: 1.0.1 The skill-market bundle is a utility for discovering and installing additional agent skills from a specific marketplace (api.zerone.market). The Python script (scripts/market.py) uses standard libraries to perform read-only API requests and includes proper URL encoding for user-supplied parameters. Most importantly, the SKILL.md instructions include explicit security guardrails, directing the AI agent to never auto-run commands and to require manual user confirmation and verification before proceeding with any installation steps.
Capability Assessment
Purpose & Capability
Name/description match the included script and SKILL.md: the skill queries https://api.zerone.market/api for listing, info, and install tutorials. No unrelated credentials, binaries, or platform accesses are requested.
Instruction Scope
SKILL.md instructs the agent to fetch listings/info/install tutorials and to require explicit user approval before executing any install commands. This stays within the marketplace purpose. Reminder: the marketplace may return arbitrary install commands (clone, curl, run scripts) — the skill delegates the decision to the user, which is appropriate but risky in practice.
Install Mechanism
There is no automated install spec and the included scripts only perform HTTPS GETs to the declared endpoint and print JSON/text. No archives are downloaded or executed by the skill itself, lowering local install risk.
Credentials
The skill declares no required environment variables or credentials and the code does not read environment secrets. It only needs network access to the marketplace endpoint, which is proportional to its stated function.
Persistence & Privilege
always is false and the skill does not request special system privileges or modify other skills. It does instruct placing installed skills under .agent/skills/ (expected for an installer).
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install skill-market
  3. After installation, invoke the skill by name or use /skill-market
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Added explicit security warnings and precautions before executing installation commands. - Users must now confirm and approve all install commands before any installation action is taken. - Recommended verifying package integrity and reviewing installation instructions manually or in a sandbox. - Improved guidance to restrict privileged actions during skill installation. - Removed README.md file.
v1.0.0
- Initial release of the skill-market. - Enables discovery and installation of new skills from the Zerone Skill Market. - Provides commands to list available skills, view details, check framework compatibility, and obtain install instructions. - Guides users through skill installation, including environment checks and framework suggestions if compatibility issues arise. - Integrates with Zerone Market API and manages skills in the local .agent/skills/ directory.
Metadata
Slug skill-market
Version 1.0.1
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 2
Frequently Asked Questions

What is SkillMarket?

Use this skill to find, explore, and install new skills from the Zerone Skill Market (https://api.zerone.market/api). Trigger this when the user asks to "add... It is an AI Agent Skill for Claude Code / OpenClaw, with 272 downloads so far.

How do I install SkillMarket?

Run "/install skill-market" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is SkillMarket free?

Yes, SkillMarket is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does SkillMarket support?

SkillMarket is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created SkillMarket?

It is built and maintained by Zero (@zerone-agent); the current version is v1.0.1.

💬 Comments