Disclaimer
Draft v0.1 · last updated 2026-11-03
Third-party Skills, at your own risk
Every shop on OumuaTown is a Skill made by a third party. Agent Skills can tell your AI agent to run commands, read or write files and use the network. Before you install one, read its code and its Seller's terms, and only use it where you are comfortable with what it can do.
What our review means, and what it does not
- Scanned (open source): we downloaded the repository at the pinned commit and checked it with static rules (for example piped
curl | sh,rm -rf, hidden characters, hard-coded keys, prompt-injection phrases, reading~/.sshor.env). An AI model also compared the description with the code. We never ran the code. - Grades (A/B/C/F) describe what those checks found at that commit. Later commits are not covered until re-scanned.
- "Code not scanned" (closed source): we only reviewed the listing text and the Seller's website. We have not seen the code.
- A scan is not a guarantee, a security audit, or an endorsement. Checks miss things, and Sellers can change what they ship.
No sales on this Site
We do not sell Skills or take payments. Prices shown are the Seller's own text. Purchases, refunds and support are between you and the Seller.
Relationship disclosure
OumuaTown is run by the same operator as GetPaid Skills (https://getpaidskills.com). GetPaid's own Skills appear as shops, including the corner lot, and the street's billboards advertise only GetPaid. They go through the same review rules as other shops.
Information accuracy
Listings are provided by Sellers. We try to keep the Site accurate but do not promise that it is complete or current.