← 返回 Skills 市场
Niche - Peer to Peer Trading Cards Marketplace
作者
ClementSutjiatma
· GitHub ↗
· v1.0.0
1169
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install niche
功能描述
Trading card marketplace with partial USDC deposits. Browse cards, deposit partial amounts, and complete purchases with secure on-chain escrow.
安全使用建议
Do not install or run this skill yet. Ask the publisher for the source code or an installable package (npm/github) that provides the 'niche' CLI and verify the package is signed or published by a known author. Confirm the hosted backend repository and privacy/security controls (who controls the Supabase/Vercel projects). Verify where passkeys and any local auth (~/.niche/auth.json) are stored and whether private keys remain under your control. If you test, do so in a sandboxed environment and avoid using real funds/credentials until you can inspect the client and backend code and confirm a trusted source.
功能分析
Type: OpenClaw Skill
Name: niche
Version: 1.0.0
The skill defines a cron job (`*/15 * * * * niche check-matches`) in `skill.md` which is a persistent execution mechanism. While the stated purpose is benign ('Check for new cards matching user watches'), the execution of an uninspected binary (`niche`) on a schedule represents a risky capability without clear evidence of malicious intent, thus classifying it as suspicious. No direct prompt injection attempts or other clear malicious behaviors were found in the provided files.
能力评估
Purpose & Capability
The name/description describe a marketplace with a CLI client and hosted backend. However, the skill declares a node binary requirement and documents many CLI commands (niche ...) yet provides no install spec, no code files, and no homepage/source repository. That mismatch makes it unclear how the described capabilities would actually be provided to the agent.
Instruction Scope
SKILL.md instructs the agent to run CLI commands, open the hosted UI for passkey logins, and references a local auth path (~/.niche/auth.json). The instructions assume a local 'niche' CLI that will read/write local files and open browsers, but the skill bundle contains no CLI implementation. The instructions do not explicitly tell the agent to exfiltrate secrets, but they imply local credential material may be stored/used — the lack of the actual client increases risk and ambiguity.
Install Mechanism
There is no install specification and no code files. For a skill that documents a CLI and requires node, an install step (npm package, binary, or repository) would be expected. The absence of any install mechanism is inconsistent and means the agent would either fail to run commands or attempt to run non-existent binaries, creating unpredictable behavior.
Credentials
The skill requests no environment variables or credentials, which aligns with a hosted-backend design. However, it references local auth storage (~/.niche/auth.json) and passkey-based wallet creation; those imply handling sensitive auth material locally, so users should confirm where private keys/passkeys are stored and who controls the backend. Overall, declared env/credential requests are minimal but not fully explained.
Persistence & Privilege
always is false (good), but the metadata includes a cron entry to run 'niche check-matches' every 15 minutes. Scheduling periodic commands is reasonable for a marketplace watcher, but combined with the missing CLI, it raises the possibility of scheduled failed invocations or unexpected behavior. Autonomous invocation is allowed (platform default).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install niche - 安装完成后，直接呼叫该 Skill 的名称或使用
/niche触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of Niche — a peer-to-peer trading card marketplace with partial USDC deposit and secure on-chain escrow.
- Browse and search listings without an account; share card URLs easily.
- List, hold, and purchase cards with partial USDC deposits (escrowed on-chain).
- Require login (email, OTP, passkey) for deposits, payments, and wallet operations.
- Meet in person to inspect cards before completing payment; atomic final payment and fund release upon confirmation.
- CLI and hosted browser-based UI; all heavy logic and escrow managed server-side.
- Testnet support with simulated users and Circle USDC faucet for testing.
- Automated check for watched card matches (every 15 minutes).
元数据
常见问题
Niche - Peer to Peer Trading Cards Marketplace 是什么？
Trading card marketplace with partial USDC deposits. Browse cards, deposit partial amounts, and complete purchases with secure on-chain escrow. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1169 次。
如何安装 Niche - Peer to Peer Trading Cards Marketplace？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install niche」即可一键安装，无需额外配置。
Niche - Peer to Peer Trading Cards Marketplace 是免费的吗？
是的，Niche - Peer to Peer Trading Cards Marketplace 完全免费（开源免费），可自由下载、安装和使用。
Niche - Peer to Peer Trading Cards Marketplace 支持哪些平台？
Niche - Peer to Peer Trading Cards Marketplace 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Niche - Peer to Peer Trading Cards Marketplace？
由 ClementSutjiatma（@clementsutjiatma）开发并维护，当前版本 v1.0.0。
推荐 Skills