Agent Marketplace

Agent Marketplace enables skill discovery, rating, version control, dependency management, and installation with conflict detection and rollback support.

This package appears to implement a legitimate agent marketplace, but it will reach out to a remote registry and can download and write code to your filesystem (default installDir './skills' and cache './.marketplace-cache'). Before installing or running it: 1) Verify and trust the registry URL (change it from the default if necessary). 2) Run it in an isolated environment or container and set installDir/dataDir to a folder with limited privileges. 3) Review any downloaded skill code before executing it — the installer writes package.json and index.js files (or arbitrary blobs fetched from skill.downloadUrl). 4) If you operate in a sensitive environment, prefer a private/local registry and enable auditing of cached/install files. 5) Note there are no requested credentials, so no secrets appear to be exfiltrated by default; however, a compromised registry or malicious downloadUrl could deliver harmful code — treat remote sources as untrusted unless you control or verify them.

Type: OpenClaw Skill Name: yuyonghao-agent-marketplace Version: 0.1.0 The bundle implements a functional 'Agent Marketplace' for discovering and installing skills, which involves high-risk capabilities such as downloading remote code and performing local file operations. Specifically, `src/installer.js` contains logic to download packages from remote URLs and write code directly to the filesystem, while `src/registry.js` communicates with an external registry (clawhub.com). Although these behaviors are aligned with the stated purpose of a package manager and include some basic sanitization (e.g., regex-based filename filtering in the registry cache), the inherent risk of remote code execution and arbitrary file persistence without robust signature verification qualifies the bundle as suspicious under the provided criteria.