← 返回 Skills 市场
0xrichyrich

Nudge Marketplace

作者 0xrichyrich · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1499
总下载
1
收藏
3
当前安装
1
版本数
在 OpenClaw 中安装
/install nudge-marketplace
功能描述
Browse, submit, and manage AI agents on the Nudge marketplace, a wellness platform using $NUDGE tokens and x402 payment protocol.
安全使用建议
This skill appears to document a legitimate marketplace flow, but it asks users to sign and send tokens and includes sample code that uses a raw private key. Before using it: do not paste your private key into an agent or chat; confirm the marketplace domain and recipient wallet address independently (e.g., via the official website or a trusted announcement); verify the token and network on a block explorer; prefer using a hardware wallet or a signer UI rather than sharing keys; ask the skill author to explicitly declare credential requirements and to provide a secure signer workflow instead of raw private-key examples. If you are unsure about the site or recipient address, do not perform any transfers.
功能分析
Type: OpenClaw Skill Name: nudge-marketplace Version: 1.0.0 The skill bundle is benign. It provides instructions and API references for interacting with the 'Nudge Marketplace' to list and manage AI agents. All network calls are directed to `https://www.littlenudge.app`, and the payment instructions for listing an agent are transparently detailed in `SKILL.md`, including the recipient wallet address (`0x2390C495896C78668416859d9dE84212fCB10801`) and token details. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation.
能力评估
Purpose & Capability
The SKILL.md clearly documents a marketplace for submitting and listing agents on littlenudge.app (consistent with the skill name). However the package metadata provides no description and declares no required credentials, while the instructions include examples that require a wallet private key and token transfers. Asking a user to perform a payment is plausible for a marketplace, but the metadata failing to declare any credential or secret requirement is an incoherence.
Instruction Scope
Runtime instructions include curl calls to the marketplace and a full TypeScript example that instantiates a wallet client using a raw privateKey and submits an on-chain transfer. The skill therefore instructs handling highly sensitive secrets (private keys) and making token transfers. It also contains an inconsistency about the network in the 402 response (says "Base") vs the Payment Details section (Monad Testnet). There is no guidance to use a secure signer or out-of-band wallet UI; the instructions encourage direct private-key use which broadens the agent's access to secrets and could enable exfiltration if a user supplies a key to the agent.
Install Mechanism
No install spec and no code files — this is instruction-only, so nothing is written to disk or fetched during install. That reduces supply-chain risk.
Credentials
The skill metadata lists no required environment variables or primary credential, but the examples and flow explicitly require a user's wallet/private key to create and sign a transaction. This is a mismatch: the skill implicitly requires very sensitive credentials (private key) but does not declare them. Requiring a private key is only proportionate if the skill provides secure signer integration or clearly documents how secrets are handled — neither is present.
Persistence & Privilege
always is false and there is no install behavior or modifications to other skills or system configuration. The skill does not request long-term presence or elevated platform privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install nudge-marketplace
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /nudge-marketplace 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release - AI agent marketplace with x402 payments
元数据
Slug nudge-marketplace
版本 1.0.0
许可证
累计安装 3
当前安装数 3
历史版本数 1
常见问题

Nudge Marketplace 是什么?

Browse, submit, and manage AI agents on the Nudge marketplace, a wellness platform using $NUDGE tokens and x402 payment protocol. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1499 次。

如何安装 Nudge Marketplace?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install nudge-marketplace」即可一键安装,无需额外配置。

Nudge Marketplace 是免费的吗?

是的,Nudge Marketplace 完全免费(开源免费),可自由下载、安装和使用。

Nudge Marketplace 支持哪些平台?

Nudge Marketplace 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Nudge Marketplace?

由 0xrichyrich(@0xrichyrich)开发并维护,当前版本 v1.0.0。

💬 留言讨论