Skill: himanshunextbase/agentplace (version 2.0.3)

# Agentplace — AI Agent Marketplace for OpenClaw ## Overview Agentplace is a marketplace of community-contributed AI agent skills designed for the OpenClaw ecosystem. This skill enables OpenClaw users to: - Browse the Agentplace marketplace - Search for agents by keyword or capability - View agent metadata and descriptions - Install agents locally into the OpenClaw workspace All actions performed by this skill are explicitly user-initiated. The skill never performs background searches, automatic downloads, or silent installations. The goal of Agentplace is to provide a safe and transparent way for users to discover useful agents created by the community. --- ## Core Principles ### 1. User-initiated execution Marketplace queries occur only when the user explicitly asks to browse or install an agent. Examples: - "Browse the marketplace" - "Show available agents" - "Search for agents that do X" - "Install agent <name>" If the user does not explicitly request marketplace actions, this skill should not be used. ### 2. Explicit user consent Installing third-party agents requires two confirmation steps: 1. Confirmation before downloading 2. Confirmation after previewing the agent files ### 3. Transparent preview before installation Before installing an agent: - The archive contents are listed - The SKILL.md file is shown - The user can verify the agent description ### 4. Local execution Installed agents run locally on the user's machine. Agentplace does not execute code remotely and does not receive prompts or runtime data. --- ## Privacy Policy This skill communicates with the Agentplace API only when necessary. Network calls occur only when: - Browsing the marketplace - Searching for agents - Requesting metadata - Downloading an agent package No conversation data or prompts are transmitted to Agentplace servers as part of normal runtime. --- ## Agent Tiers | Tier | Authentication | Description | |-----|-----|-----| | Free | None | Available for immediate download after confirmation | | Paid | API key | Requires purchase and dashboard API key | Paid agents require a dashboard API key in the format: ak_xxxxxxxx The API key is used only to authorize downloads and must never be included in prompts or shared publicly. --- ## Marketplace API List agents: curl -s https://api.agentplace.sh/marketplace/agents Search agents: curl -s "https://api.agentplace.sh/marketplace/agents?search=<query>" Get agent details: curl -s https://api.agentplace.sh/marketplace/agents/<agent-id> --- ## Installation Workflow Step 1 — Ask user confirmation Install <agent name>? (yes/no) Step 2 — Request download metadata Free agent: curl -s https://api.agentplace.sh/marketplace/agents/<agent-id>/download Paid agent: curl -s -H "x-[REDACTED_SECRET]" https://api.agentplace.sh/marketplace/agents/<agent-id>/download Example response: { "download_url": "https://cdn.agentplace.sh/agents/example.zip", "version": "1.0.0", "tier": "free" } Step 3 — Download agent package curl -sL "$download_url" -o /tmp/agent.zip Step 4 — Preview contents zipinfo -1 /tmp/agent.zip unzip -p /tmp/agent.zip SKILL.md > /tmp/agent-SKILL.md cat /tmp/agent-SKILL.md Step 5 — Final confirmation Install this agent now? (yes/no) Step 6 — Install locally unzip -qo /tmp/agent.zip -d /tmp/agent-preview/ mv /tmp/agent-preview ~/.openclaw/workspace/skills/<agent-id>/ rm /tmp/agent.zip --- ## Integrity and Safety Agentplace distributes agents as ZIP archives. Users should: - Verify the SKILL.md description - Review archive contents - Prefer trusted publishers Agentplace performs manual review of submitted skills before listing them in the marketplace. --- ## API Key Setup Visit: https://www.agentplace.sh/dashboard Generate an API key in the format: ak_xxxxxxxx Guidelines: - Store keys securely - Never commit keys to public repositories - Never share keys publicly --- ## Error Handling 401 — Invalid API key 403 — Agent not purchased 404 — Agent not found --- ## Security Guidelines - User-initiated execution only - Explicit confirmation before installation - Preview agent documentation before install - No automatic execution of downloaded code - Agents run locally on the user's machine - API keys are used only for download authorization --- ## Marketplace Safety Process Agentplace performs review of uploaded agents including: - manual inspection of submitted archives - verification of metadata - checking for unexpected files This helps ensure that marketplace agents are safe and consistent with their descriptions. --- ## Summary Agentplace provides a transparent and user-controlled way to install community-built agents. Key protections include: - user-initiated execution - explicit install confirmations - archive preview before installation - local execution of agents - limited API key usage


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: suspicious | SkillSpector: suspicious (MEDIUM)