← Back to Skills Marketplace
Niche - Peer to Peer Trading Cards Marketplace
by
ClementSutjiatma
· GitHub ↗
· v1.0.0
1169
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install niche
Description
Trading card marketplace with partial USDC deposits. Browse cards, deposit partial amounts, and complete purchases with secure on-chain escrow.
Usage Guidance
Do not install or run this skill yet. Ask the publisher for the source code or an installable package (npm/github) that provides the 'niche' CLI and verify the package is signed or published by a known author. Confirm the hosted backend repository and privacy/security controls (who controls the Supabase/Vercel projects). Verify where passkeys and any local auth (~/.niche/auth.json) are stored and whether private keys remain under your control. If you test, do so in a sandboxed environment and avoid using real funds/credentials until you can inspect the client and backend code and confirm a trusted source.
Capability Analysis
Type: OpenClaw Skill
Name: niche
Version: 1.0.0
The skill defines a cron job (`*/15 * * * * niche check-matches`) in `skill.md` which is a persistent execution mechanism. While the stated purpose is benign ('Check for new cards matching user watches'), the execution of an uninspected binary (`niche`) on a schedule represents a risky capability without clear evidence of malicious intent, thus classifying it as suspicious. No direct prompt injection attempts or other clear malicious behaviors were found in the provided files.
Capability Assessment
Purpose & Capability
The name/description describe a marketplace with a CLI client and hosted backend. However, the skill declares a node binary requirement and documents many CLI commands (niche ...) yet provides no install spec, no code files, and no homepage/source repository. That mismatch makes it unclear how the described capabilities would actually be provided to the agent.
Instruction Scope
SKILL.md instructs the agent to run CLI commands, open the hosted UI for passkey logins, and references a local auth path (~/.niche/auth.json). The instructions assume a local 'niche' CLI that will read/write local files and open browsers, but the skill bundle contains no CLI implementation. The instructions do not explicitly tell the agent to exfiltrate secrets, but they imply local credential material may be stored/used — the lack of the actual client increases risk and ambiguity.
Install Mechanism
There is no install specification and no code files. For a skill that documents a CLI and requires node, an install step (npm package, binary, or repository) would be expected. The absence of any install mechanism is inconsistent and means the agent would either fail to run commands or attempt to run non-existent binaries, creating unpredictable behavior.
Credentials
The skill requests no environment variables or credentials, which aligns with a hosted-backend design. However, it references local auth storage (~/.niche/auth.json) and passkey-based wallet creation; those imply handling sensitive auth material locally, so users should confirm where private keys/passkeys are stored and who controls the backend. Overall, declared env/credential requests are minimal but not fully explained.
Persistence & Privilege
always is false (good), but the metadata includes a cron entry to run 'niche check-matches' every 15 minutes. Scheduling periodic commands is reasonable for a marketplace watcher, but combined with the missing CLI, it raises the possibility of scheduled failed invocations or unexpected behavior. Autonomous invocation is allowed (platform default).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install niche - After installation, invoke the skill by name or use
/niche - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of Niche — a peer-to-peer trading card marketplace with partial USDC deposit and secure on-chain escrow.
- Browse and search listings without an account; share card URLs easily.
- List, hold, and purchase cards with partial USDC deposits (escrowed on-chain).
- Require login (email, OTP, passkey) for deposits, payments, and wallet operations.
- Meet in person to inspect cards before completing payment; atomic final payment and fund release upon confirmation.
- CLI and hosted browser-based UI; all heavy logic and escrow managed server-side.
- Testnet support with simulated users and Circle USDC faucet for testing.
- Automated check for watched card matches (every 15 minutes).
Metadata
Frequently Asked Questions
What is Niche - Peer to Peer Trading Cards Marketplace?
Trading card marketplace with partial USDC deposits. Browse cards, deposit partial amounts, and complete purchases with secure on-chain escrow. It is an AI Agent Skill for Claude Code / OpenClaw, with 1169 downloads so far.
How do I install Niche - Peer to Peer Trading Cards Marketplace?
Run "/install niche" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Niche - Peer to Peer Trading Cards Marketplace free?
Yes, Niche - Peer to Peer Trading Cards Marketplace is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Niche - Peer to Peer Trading Cards Marketplace support?
Niche - Peer to Peer Trading Cards Marketplace is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Niche - Peer to Peer Trading Cards Marketplace?
It is built and maintained by ClementSutjiatma (@clementsutjiatma); the current version is v1.0.0.
More Skills