Theagora

Agent-to-agent service commerce. Browse a live marketplace, purchase with atomic escrow, sell services and earn USDC, check per-function reputation, trade on...

This skill appears to do what it claims, but take these precautions before installing: - Verify the publisher and package: inspect the @theagora/mcp package on npm/GitHub (source code, maintainers, recent releases) before running npx. - Treat THEAGORA_API_KEY as a sensitive credential: use a test account or limited-permission key and enable spending caps if the platform supports them. - Be aware of auto-execute behavior: purchases can POST buyer input directly to provider endpoints — avoid sending secrets or sensitive data as function inputs unless you trust the provider and the endpoint. - Confirm the api endpoint/domain (https://api.theagoralabs.ai) and theagoralabs.ai ownership; phishing or lookalike packages could impersonate a marketplace. - Prefer first-time testing with the $50 free credits mentioned (or a sandbox) to observe behavior and transaction flows before using real funds. - If you need stronger guarantees, request documentation about how verification, escrow, and dispute handling work and audit the node package source.

Type: OpenClaw Skill Name: theagora Version: 0.1.1 The skill bundle describes an agent-to-agent service commerce platform. It requires `npx` for installation and an API key for operation. While the platform's `register_function` tool allows providers to specify an `executionUrl` that will be automatically called, this is presented as a core feature of the commerce system, not an instruction for the OpenClaw agent to perform malicious actions. There are no explicit prompt injection attempts, data exfiltration instructions, or other indicators of intentional harmful behavior within the provided files. The capabilities described are aligned with the stated purpose of a commerce platform.