Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/modu-ai/moai-coworkWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/modu-ai/moai-cowork/moai-seller)<a href="https://agentmods.dev/plugins/modu-ai/moai-cowork/moai-seller"><img src="https://agentmods.dev/badge/plugins/modu-ai/moai-cowork/moai-seller/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/modu-ai/moai-cowork/moai-seller"><img src="https://agentmods.dev/badge/plugins/modu-ai/moai-cowork/moai-seller.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade A, and why
moai-seller scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 99 lines — stays where its author put it; the contents beside it link to each section on GitHub.
{
"name": "moai-seller",
"displayName": "🛒 셀러",
"version": "1.3.0",
"description": "이커머스 셀러 전담 AI 코워커 — 스마트스토어·아임웹·카페24 MCP 연동과 상세페이지·마켓플레이스·광고·CRM 등 커머스 실무 스킬 30종. VOC·채널 메시지는 moai-cs(CS매니저)로 이관. 자연어 요청 시 매칭 스킬이 자동 호출됩니다. 이런 분께 추천: 온라인 셀러·이커머스 운영자.",
"author": {
"name": "모두의 AI",
"email": "[email protected]"
},
"license": "Apache-2.0",
"userConfig": {
"NAVER_COMMERCE_CLIENT_ID": {
"type": "string",
"title": "네이버 커머스 애플리케이션 ID",
"description": "커머스API센터에서 발급받은 애플리케이션 ID.",
"sensitive": true
},
"NAVER_COMMERCE_CLIENT_SECRET": {
"type": "string",
"title": "네이버 커머스 애플리케이션 시크릿",
"description": "전자서명(bcrypt salt)에 쓰입니다.",
"sensitive": true
},
"NAVER_COMMERCE_ACCOUNT_ID": {
"type": "string",
"title": "판매자 계정 ID",
"description": "인증 주체가 SELLER 일 때만 필요합니다.",
"sensitive": false
},
"NAVER_COMMERCE_TYPE": {
"type": "string",
"title": "인증 주체 타입",
"description": "SELF(기본) 또는 SELLER 중 하나입니다.",
"sensitive": false,
"default": "SELF"
},
"IMWEB_CLIENT_ID": {
"type": "string",
"title": "아임웹 클라이언트 ID",
"description": "아임웹 OPEN API v3 앱의 클라이언트 ID.",
"sensitive": true
},
"IMWEB_CLIENT_SECRET": {
"type": "string",
"title": "아임웹 클라이언트 시크릿",
"description": "토큰 자동 갱신에 쓰입니다.",
"sensitive": true
},
"IMWEB_ACCESS_TOKEN": {
"type": "string",
"title": "아임웹 액세스 토큰",
"description": "최초 1회 발급값. 이후에는 자동 갱신되어 저장됩니다.",
"sensitive": true
},
"IMWEB_REFRESH_TOKEN": {
"type": "string",
"title": "아임웹 리프레시 토큰",
"description": "최초 1회 발급값. 이후에는 자동 갱신되어 저장됩니다.",
"sensitive": true
},
"IMWEB_UNIT_CODE": {
"type": "string",
"title": "아임웹 유닛 코드",
"description": "다중 사이트를 쓸 때 대상 사이트를 지정합니다.",
"sensitive": false
},
"CAFE24_MALL_ID": {
"type": "string",
"title": "카페24 몰 ID",
"descriptionWhat it installs
The manifest is a name and a version. 11 skills, 2 agents travel with it, and installing the plugin installs all of them — 3,085 tokens a session between them. Each is measured on its own page, and each can be installed alone.
- Skill commerce-detail-page-copy A 330 tokens
- Skill commerce-ad-claim-compliance-kr A 381 tokens
- Skill commerce-detail-page-planner A 285 tokens
- Skill commerce-integrated-strategy A 410 tokens
- Skill commerce-automation-audit A 406 tokens
- Skill commerce-jtbd-persona A 286 tokens
- Skill commerce-detail-page-image A 179 tokens
- Skill commerce-live-commerce A 156 tokens
- Skill commerce-early-fan-builder A 193 tokens
- Skill commerce-influencer-collab A 217 tokens
- Skill commerce-coupang-ad-optimizer A 43 tokens
- Agent listing-builder A 118 tokens
- Agent margin-auditor A 81 tokens
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 99 lines scan A 2b2e684905aa
moai-seller is a plugin published in the GitHub repository modu-ai/moai-cowork (298 stars, last pushed 6d ago), licensed Apache-2.0. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other plugins, from other repositories
shopware-env
Bootstrap and maintain Shopware development environments. Lifecycle MCP tools for dependencies, database, frontend builds, and plugin management.
data
Data science and data engineering agents for visualization (D3, Highcharts), notebooks (Jupyter, Google Colab), R, and Python data engineering.
excalidraw-diagram
Generate and modify Excalidraw diagrams from natural language descriptions and code analysis.
content-guards
Combined content validation and guard plugin: token-validator, markdown-validator, readme-validator, webfetch-guard, issue/PR backlog limiter, and a public-repo leakage guard.
script-guards
Prevents unnecessary script generation - enforces research-first, native-tool-first patterns via PreToolUse and UserPromptSubmit hooks.
marketplace
Skills for preparing secondhand items for resale on Facebook Marketplace and eBay. Pricing research, photo review, and listing generation.