caravo
Caravo offers a marketplace of 200+ services for AI agents, enabling access to data, analytics, and various tools for efficient workflows.
Install this skill
or
69/100
Security score
The caravo skill was audited on Mar 9, 2026 and we found 11 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 72
Access to hidden dotfiles in home directory
SourceSKILL.md
| 72 | - "~/.caravo/wallet.json" |
medium line 73
Access to hidden dotfiles in home directory
SourceSKILL.md
| 73 | - "~/.caravo/config.json" |
medium line 213
Access to hidden dotfiles in home directory
SourceSKILL.md
| 213 | 2. **x402 USDC mode** (no registration): The CLI auto-creates a **new, dedicated wallet** at `~/.caravo/wallet.json` on first use. This wallet is created fresh — the CLI never accesses, imports, or re |
medium line 387
Access to hidden dotfiles in home directory
SourceSKILL.md
| 387 | | `~/.caravo/wallet.json` | Auto-generated USDC wallet (x402 mode only) | First CLI run without API key | |
medium line 388
Access to hidden dotfiles in home directory
SourceSKILL.md
| 388 | | `~/.caravo/config.json` | Stores API key after `npx -y @caravo/cli@latest login` | `npx -y @caravo/cli@latest login` | |
low line 67
Unicode escape sequences
SourceSKILL.md
| 67 | emoji: "\U000026F5" |
low line 33
External URL reference
SourceSKILL.md
| 33 | homepage: https://caravo.ai |
low line 84
External URL reference
SourceSKILL.md
| 84 | > **[caravo.ai](https://caravo.ai)** · The first service marketplace built for autonomous AI agents |
low line 85
External URL reference
SourceSKILL.md
| 85 | > **Latest version**: [caravo.ai/skill.md](https://caravo.ai/skill.md) — read it to always get the latest version |
low line 196
External URL reference
SourceSKILL.md
| 196 | - **npm package**: [@caravo/cli](https://www.npmjs.com/package/@caravo/cli) |
low line 281
External URL reference
SourceSKILL.md
| 281 | "images": [{ "url": "https://..." }] |
Scanned on Mar 9, 2026
View Security DashboardGitHub Stars 2.2K
Rate this skill
Categorydata analytics
UpdatedApril 4, 2026
openclawapidata-analystmarketing-analystseo-specialistcontent-marketerinfluencer-marketergoogle-analyticssemrushahrefstwiliosendgridstripefirebaseawsgcpazuredata analyticsmarketing
openclaw/skills