← 返回 Skills 市场

Ampere marketplace

Name: Ampere marketplace
Author: himanshunextbase

作者 HimanshuNextbase · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

104

总下载

当前安装

版本数

在 OpenClaw 中安装

/install ampere

功能描述

Ampere AI Agent Marketplace for OpenClaw. Browse and install free & paid agents across developer tools, automation, research, content, and more.

使用说明 (SKILL.md)

Ampere — AI Agent Marketplace for OpenClaw

Ampere is a growing marketplace of ready-to-use agent skills for OpenClaw. Browse by category, search by keyword, and install in seconds.

All agents run locally on the user's machine. Nothing is executed server-side. Each agent is a ZIP containing a SKILL.md prompt and supporting files.

Agent Tiers

Tier	Auth	How it works
Free	None	Download and use immediately
Paid	Dashboard API key (`ak_xxxx`)	Purchase in Ampere → use your single dashboard key to download. Key only authorises the download — nothing else leaves the machine.

When to Use This

User wants to do something outside your current skills → search first
User asks what's available, what you can do, or mentions "marketplace" / "agents"
User asks to browse or install a skill

Default behaviour: When a user asks for a capability you don't have, search Ampere before saying you can't do it.

Core Flows

Search / Browse

# All agents
curl -s "https://api.agentplace.sh/marketplace/agents"

# Search by keyword
curl -s "https://api.agentplace.sh/marketplace/agents?search=\x3Cquery>"

# Single agent details
curl -s "https://api.agentplace.sh/marketplace/agents/\x3Cagent-id>"

Response: { "count": number, "agents": [...] } — each agent has id, name, description, category, tags, tier ("free" | "paid"), price, enabled.

When showing results:

Group by category when listing all
Show name, one-line description, and FREE/PAID badge
Always search the live API — the catalogue updates constantly

Install

User picks an agent → ask for confirmation

Get download URL:

# Free
curl -s "https://api.agentplace.sh/marketplace/agents/\x3Cagent-id>/download"
# Paid
curl -s -H "x-api-key: ak_xxxx" "https://api.agentplace.sh/marketplace/agents/\x3Cagent-id>/download"

Show the user a preview of the SKILL.md content

User approves → download and extract:

curl -sL "$download_url" -o /tmp/agent.zip
unzip -qo /tmp/agent.zip -d ~/.openclaw/workspace/skills/
rm /tmp/agent.zip

Or use the helper: ./install.sh \x3Cagent-id> [--api-key ak_xxxx]

Done — skill is live at ~/.openclaw/workspace/skills/\x3Cagent-id>/

Never install or run commands without explicit user approval.

API Key Setup (Paid Agents Only)

Free agents need zero setup. For paid agents:

Sign up in Ampere
API key is on your dashboard (format: ak_xxxx)
Purchase the agent you want
Use the same key for all purchased agents — one key for everything

Error Handling

Code	Meaning	Tell the user
`401`	Missing/invalid API key	"Your API key must start with `ak_`. Get it from your Ampere dashboard."
`403`	Agent not purchased	"You haven't purchased this agent in Ampere yet."
`404`	Agent not found	"This agent doesn't exist. Try searching for similar ones."

Security

Always ask before installing or running anything
Preview first — show SKILL.md content before writing to disk
No auto-execution — never run setup commands automatically
Local only — agents run on the user's machine, no data sent to Ampere
Download auth only — the API key is sent to api.agentplace.sh for the download URL and nowhere else

安全使用建议

This skill appears to do what it claims — let you browse and download agent ZIPs — but it asks you to download and extract archives from a third-party API without recommending signature or checksum verification. Before installing agents from Ampere: 1) Always preview the included SKILL.md and inspect the ZIP contents (e.g., curl -sL "$url" -o /tmp/agent.zip; unzip -l /tmp/agent.zip) to check for unexpected executables or scripts. 2) Prefer installing first into an isolated directory (not directly into your main skills folder) and don't run any included install scripts unless you trust the author. 3) For paid agents, only use your AMPERE_API_KEY with the stated domain and never paste other secrets. 4) If you rely on stronger safety, ask Ampere for signatures or checksums for agent archives or only install agents from authors you trust. Given these gaps, proceed cautiously — verify archive contents and provenance before extracting into your active skills workspace.

功能分析

Type: OpenClaw Skill Name: ampere Version: 1.0.0 The skill functions as a third-party marketplace and downloader that fetches ZIP files from a remote API (api.agentplace.sh) and installs them into the local environment (~/.openclaw/workspace/skills/). While SKILL.md includes security instructions such as requiring user confirmation and previewing content before installation, the core logic facilitates Remote Code Execution (RCE) by downloading and unzipping arbitrary code from an external source. The reliance on a remote endpoint for executable content and the mention of an external 'install.sh' script (not provided in the bundle) represent a significant supply chain risk.

能力评估

✓ Purpose & Capability

Name/description, the optional AMPERE_API_KEY, and the listed API endpoints are coherent: a marketplace that lists agents and provides download URLs legitimately needs a download API and (for paid content) an API key.

ℹ Instruction Scope

SKILL.md keeps scope focused on browsing and installing agents and explicitly requires user consent and a preview of SKILL.md before writing to disk. It instructs use of the live API endpoints (https://api.agentplace.sh) and to download agent ZIPs and extract them into ~/.openclaw/workspace/skills/. It does not instruct the agent to execute downloaded code, but it also does not require verifying archive integrity or listing/examining archive contents beyond previewing the SKILL.md.

⚠ Install Mechanism

There is no install spec (instruction-only), but the provided install flow downloads arbitrary ZIP files and unzips them into the user's skills directory. The flow uses a custom domain (api.agentplace.sh) and performs extract operations without recommending signature/checksum verification or sandboxing — this is a common vector for introducing malicious files even if the skill itself does not auto-run them.

✓ Credentials

No required environment variables; AMPERE_API_KEY is optional and clearly tied to the 'paid' tier. The requested credentials are proportional to the described functionality and are limited in scope in the documentation.

✓ Persistence & Privilege

The skill is not always-enabled, does not request broad system privileges, and only writes into the user's OpenClaw skills workspace per the instructions. That behavior is expected for a marketplace skill, though writing files to the home workspace is inherently persistent and should be treated carefully.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install ampere
安装完成后，直接呼叫该 Skill 的名称或使用 /ampere 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial version

元数据

Slug ampere

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题