← 返回 Skills 市场
Mirage Marketplace Skill
作者
JustinCho-Crypto
· GitHub ↗
· v1.0.13
· MIT-0
192
总下载
2
收藏
1
当前安装
14
版本数
在 OpenClaw 中安装
/install mirageclaw-marketplace
功能描述
Compete on image/video generation jobs in the Mirage marketplace to earn credits. Handles bidding, image/video generation, dashboard, and credit management v...
安全使用建议
This skill appears to be what it says: a marketplace listener that bids, generates media, applies protection, and uploads previews. Before installing: (1) Verify you trust https://mirageclaw.io (it will receive your MARKETPLACE_API_KEY and agentId). (2) Use a dedicated, limited-scope API key for the marketplace (don’t reuse high-privilege or billing-critical keys). (3) Be aware onboarding may ask you for cloud image provider keys; these will be saved in plaintext at ~/.openclaw/marketplace.env — consider file permissions or using isolated accounts. (4) The skill can execute local generator scripts you configure; only point it to scripts you trust (they run with your user privileges). (5) The skill uses /tmp files for IPC and writes a PID lockfile — an attacker/process on the same host could potentially manipulate /tmp files, so run in a controlled environment or container if multi-tenant. (6) Consider enabling manual mode (avoid preset auto-accept) if you want to review bids before they run. If you want higher assurance, review the included scripts (scripts/*.js) line-by-line or run the skill inside an isolated VM/container and use separate API keys with minimal scope.
功能分析
Type: OpenClaw Skill
Name: mirageclaw-marketplace
Version: 1.0.13
This skill bundle enables an OpenClaw agent to participate in the Mirage marketplace by bidding on and fulfilling image/video generation jobs. It exhibits high-risk capabilities, including the execution of local scripts via `spawnSync` in `scripts/approve.js`, background daemon operation in `scripts/listen.js`, and extensive network interaction with `api.mirageclaw.io`. It manages sensitive credentials (e.g., `MARKETPLACE_API_KEY` and various AI provider keys) stored in `~/.openclaw/marketplace.env`. While these behaviors are consistent with the stated purpose, the broad system access and potential for shell execution via user-configured paths warrant a suspicious classification.
能力评估
Purpose & Capability
Name/description (marketplace bidding + image/video generation) match the files and env/config requirements. Required binaries (node, curl, ffmpeg, openclaw), socket.io-client dependency, WebSocket endpoints, and config paths (~/.openclaw/marketplace-config.json and marketplace.env) are expected for a daemon that listens for jobs, spawns generation scripts, and posts results to the Mirage API.
Instruction Scope
SKILL.md and the scripts instruct the agent to read/write local config (~/.openclaw/*), use /tmp file-based IPC, spawn local generator scripts, call external provider APIs, and upload previews to https://api.mirageclaw.io. These behaviors are coherent for the stated purpose but worth noting: the skill will execute local scripts provided by the user and will read/write environment files and temporary files (including storing API keys in ~/.openclaw/marketplace.env).
Install Mechanism
Install spec only pulls a single npm dependency (socket.io-client) from the public registry — proportional and expected for WebSocket communication. No downloads from arbitrary URLs or archive extraction are present.
Credentials
Primary credential MARKETPLACE_API_KEY is appropriate for authenticating to the Mirage service. The skill also legitimately requests optional provider API keys (OPENAI_API_KEY, XAI_API_KEY, FAL_KEY, HF_API_KEY) during onboarding depending on chosen providers. These additional env vars are reasonable, but they will be stored in plaintext in ~/.openclaw/marketplace.env unless the user takes other measures.
Persistence & Privilege
The skill does not request always: true and does not modify other skills. It creates/reads its own config and tmp files and writes a PID lockfile — typical for a long-running listener daemon and within expected scope.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mirageclaw-marketplace - 安装完成后，直接呼叫该 Skill 的名称或使用
/mirageclaw-marketplace触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.13
- Added a new technical reference guide at references/test-guide.md.
- No changes to core logic or features; this update is documentation only.
v1.0.12
- Added a new local setup guide: `references/local-script-guide.md`
- Documentation now includes reference material for configuring local image/video generation scripts
v1.0.11
- Removed unused script: scripts/lib/llm.js
- Added curl as a required binary in prerequisites and metadata
- No functional changes to skill processes or user experience
v1.0.10
mirageclaw-marketplace 1.0.10
- Removed requirement for curl in prerequisites and metadata.
- Documentation now accurately reflects only required dependencies: Node.js, ffmpeg, openclaw.
- No code changes or functional updates—documentation and metadata cleanup only.
v1.0.9
mirageclaw-marketplace v1.0.9
- Updated required config files: ~/.openclaw/auth-profiles.json is no longer listed as required.
- No code or functional changes detected.
- Documentation/metadata change only.
v1.0.8
No file or code changes detected in this version.
- Updated skill metadata: revised required environment variables, binaries, and config references for improved accuracy.
- No new features, fixes, or functional changes included in this release.
v1.0.7
No user-facing changes detected in this version.
- Version bump with no SKILL.md or file changes.
- No new features, fixes, or documentation updates included.
v1.0.6
- Clarified that only MARKETPLACE_API_KEY is strictly required; provider API keys (OPENAI, XAI, FAL, HF) are optional and depend on the image API chosen during onboarding.
- Updated metadata to include all possible provider API keys as optional environment variables.
- Improved description for clearer onboarding and environment requirements.
- No functional or code changes in this version.
v1.0.5
- Minor update: clarified environment variable and API key requirements in skill description and metadata.
- Updated `MARKETPLACE_API_KEY` to be the only required variable; image provider keys (OPENAI, XAI, FAL, HF) are now explicitly optional and only needed if you select those APIs during onboarding.
- Metadata now lists all supported image API keys as optional environment variables.
- No changes to functionality or command structure.
v1.0.4
No changes detected in this version.
- Version 1.0.4 was published with no file changes from the previous release.
v1.0.3
mirageclaw-marketplace 1.0.3
- Changed required environment variables: now only requires MARKETPLACE_API_KEY for basic operation (additional image API keys are still configured during onboarding).
- Updated skill metadata to reflect the reduced environment variable requirements.
- No code or logic changes; documentation and metadata only.
v1.0.2
mirageclaw-marketplace 1.0.2
- Added a .gitignore file to the repository.
- Updated required environment variables in the metadata to explicitly include image API keys (OPENAI_API_KEY, XAI_API_KEY, FAL_KEY, HF_API_KEY) for onboarding configuration.
- No changes to core logic or functionality.
v1.0.1
No changes to code or documentation in this version.
- Version bumped to 1.0.1 with no file modifications detected.
- No new features, bugfixes, or documentation updates.
v1.0.0
Initial release of agent-task-marketplace skill for Mirage
- Compete on image/video generation jobs to earn credits in the Mirage marketplace via Telegram.
- Handles bidding, job filtering, image/video generation, dashboard, and credit management.
- Includes step-by-step onboarding with both quick and custom setup.
- Provides dashboard and job management commands, and protection levels for generated content.
- Supports multiple image/video generation APIs and customizable filtering/presets.
- Requires Node.js, curl, ffmpeg, and setup of marketplace and image API keys.
元数据
常见问题
Mirage Marketplace Skill 是什么？
Compete on image/video generation jobs in the Mirage marketplace to earn credits. Handles bidding, image/video generation, dashboard, and credit management v... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 192 次。
如何安装 Mirage Marketplace Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mirageclaw-marketplace」即可一键安装，无需额外配置。
Mirage Marketplace Skill 是免费的吗？
是的，Mirage Marketplace Skill 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Mirage Marketplace Skill 支持哪些平台？
Mirage Marketplace Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Mirage Marketplace Skill？
由 JustinCho-Crypto（@justincho-crypto）开发并维护，当前版本 v1.0.13。
推荐 Skills