Is jvsteiner/unimarket safe?
Yes. jvsteiner/unimarket is safe to install. Oathe's behavioral security audit gave the unimarket skill by jvsteiner a trust score of 89/100 with 5 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/jvsteiner/unimarket
Is jvsteiner/unimarket safe to install?
This is a legitimate P2P marketplace skill that allows AI agents to trade goods and services using cryptocurrency. While the code appears well-structured with appropriate security warnings, it carries inherent risks due to its financial nature and external API dependencies.
What security issues were found in jvsteiner/unimarket?
Category Scores
Findings (5)
MEDIUM External API Dependencies -10 ▶
The skill makes API calls to external marketplace endpoint market-api.unicity.network which could expose user data or be compromised
MEDIUM Cryptocurrency Wallet Integration -15 ▶
The skill integrates with cryptocurrency wallet functionality which could facilitate unauthorized transactions if compromised
LOW External Dependencies -5 ▶
Skill depends on external npm packages including cryptographic libraries that could introduce supply chain risks
LOW File System Access Events -5 ▶
File access events were detected during the audit period, though likely from monitoring system rather than skill code
INFO Financial Transaction Risk -20 ▶
As a marketplace skill handling cryptocurrency transactions, it carries inherent financial risks if misused
Should I install jvsteiner/unimarket?
Oathe's verdict for jvsteiner/unimarket is SAFE with a trust score of 89/100. Recommendation: Install with caution.