← Back to Skills Marketplace
0xrichyrich

Nudge Marketplace

by 0xrichyrich · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1499
Downloads
1
Stars
3
Active Installs
1
Versions
Install in OpenClaw
/install nudge-marketplace
Description
Browse, submit, and manage AI agents on the Nudge marketplace, a wellness platform using $NUDGE tokens and x402 payment protocol.
Usage Guidance
This skill appears to document a legitimate marketplace flow, but it asks users to sign and send tokens and includes sample code that uses a raw private key. Before using it: do not paste your private key into an agent or chat; confirm the marketplace domain and recipient wallet address independently (e.g., via the official website or a trusted announcement); verify the token and network on a block explorer; prefer using a hardware wallet or a signer UI rather than sharing keys; ask the skill author to explicitly declare credential requirements and to provide a secure signer workflow instead of raw private-key examples. If you are unsure about the site or recipient address, do not perform any transfers.
Capability Analysis
Type: OpenClaw Skill Name: nudge-marketplace Version: 1.0.0 The skill bundle is benign. It provides instructions and API references for interacting with the 'Nudge Marketplace' to list and manage AI agents. All network calls are directed to `https://www.littlenudge.app`, and the payment instructions for listing an agent are transparently detailed in `SKILL.md`, including the recipient wallet address (`0x2390C495896C78668416859d9dE84212fCB10801`) and token details. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation.
Capability Assessment
Purpose & Capability
The SKILL.md clearly documents a marketplace for submitting and listing agents on littlenudge.app (consistent with the skill name). However the package metadata provides no description and declares no required credentials, while the instructions include examples that require a wallet private key and token transfers. Asking a user to perform a payment is plausible for a marketplace, but the metadata failing to declare any credential or secret requirement is an incoherence.
Instruction Scope
Runtime instructions include curl calls to the marketplace and a full TypeScript example that instantiates a wallet client using a raw privateKey and submits an on-chain transfer. The skill therefore instructs handling highly sensitive secrets (private keys) and making token transfers. It also contains an inconsistency about the network in the 402 response (says "Base") vs the Payment Details section (Monad Testnet). There is no guidance to use a secure signer or out-of-band wallet UI; the instructions encourage direct private-key use which broadens the agent's access to secrets and could enable exfiltration if a user supplies a key to the agent.
Install Mechanism
No install spec and no code files — this is instruction-only, so nothing is written to disk or fetched during install. That reduces supply-chain risk.
Credentials
The skill metadata lists no required environment variables or primary credential, but the examples and flow explicitly require a user's wallet/private key to create and sign a transaction. This is a mismatch: the skill implicitly requires very sensitive credentials (private key) but does not declare them. Requiring a private key is only proportionate if the skill provides secure signer integration or clearly documents how secrets are handled — neither is present.
Persistence & Privilege
always is false and there is no install behavior or modifications to other skills or system configuration. The skill does not request long-term presence or elevated platform privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install nudge-marketplace
  3. After installation, invoke the skill by name or use /nudge-marketplace
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release - AI agent marketplace with x402 payments
Metadata
Slug nudge-marketplace
Version 1.0.0
License
All-time Installs 3
Active Installs 3
Total Versions 1
Frequently Asked Questions

What is Nudge Marketplace?

Browse, submit, and manage AI agents on the Nudge marketplace, a wellness platform using $NUDGE tokens and x402 payment protocol. It is an AI Agent Skill for Claude Code / OpenClaw, with 1499 downloads so far.

How do I install Nudge Marketplace?

Run "/install nudge-marketplace" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Nudge Marketplace free?

Yes, Nudge Marketplace is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Nudge Marketplace support?

Nudge Marketplace is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Nudge Marketplace?

It is built and maintained by 0xrichyrich (@0xrichyrich); the current version is v1.0.0.

💬 Comments