Acceptable Use Policy
The short version
- No malware, no credential or data theft, and no skills built to make an assistant cause harm.
- Say what a skill does, including every script it runs and every service it connects to.
- Sell only what you wrote or have the right to sell.
- We remove what breaks this policy, and may close the account that listed it.
1. Never list
- Malware, or anything that downloads, hides or runs code the listing does not disclose, including obfuscated scripts and "curl | sh" installers that fetch the real payload later.
- Credential or data theft: skills that collect, send or expose passwords, API keys, tokens, cookies, files or personal data beyond what the listing states and the buyer chooses.
- Jailbreaks for harm: prompt packs or skills meant to defeat an assistant's safeguards in order to produce weapons, malware, abuse, harassment, sexual content involving minors, or other illegal or dangerous material.
- Prompt injection aimed at the buyer: hidden instructions that make an assistant act against the person using it.
- Anything illegal where it is sold, or that infringes someone else's copyright, trademark or privacy.
2. Be honest about what a skill does
A listing must say which assistants it works with, what it does, and, if it runs code or connects to a service (including an MCP server), what that code or service is and who runs it. MCP configurations carry placeholders for secrets, never real values.
3. Using the marketplace
Do not manipulate ratings, buy your own skills, scrape the marketplace in bulk, probe or overload it, or try to reach another seller's data. Report security problems to [Legal and privacy contact email]; do not test them on other people's accounts.
4. What we do
Our scanner checks every version and our staff review anything that runs or is flagged. We may reject a version, take a listing down, stop downloads of it, refund its buyers and suspend the account that listed it, and we tell the seller why. Report a listing from its page, or email [Legal and privacy contact email].