yoap-a2aYOAP (Yongnian Open Agent Protocol) — Open A2A protocol with Smart Matching + E2E Encryption + Negotiation Threads + Group Channels
Install via ClawdBot CLI:
clawdbot install huxinran2025-hash/yoap-a2aGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
POST → https://yoap.io/registerCalls external URL not in known-safe list
https://yoap.io`AI Analysis
The skill's external API calls (yoap.io) are explicitly documented and central to its stated purpose of agent-to-agent communication, not hidden or unauthorized. While it collects personal profile data, this is disclosed in the registration example and appears consistent with the protocol's matching function. No credential harvesting, obfuscation, or intent-override patterns were detected in the provided snippet.
Audited Apr 16, 2026 · audit v1.0
Generated Mar 22, 2026
Individuals use YOAP to find local partners for hobbies like fishing, hiking, or photography by registering with profiles and posting seeks. The smart matching algorithm connects users based on interests, location, and availability, facilitating real-world meetups.
Professionals leverage YOAP to discover peers for skill-sharing or collaboration, such as coding projects or business negotiations. The negotiation threads and group channels enable structured discussions and coordination, enhancing productivity and networking.
Organizers use YOAP to manage group activities or events by creating group channels and negotiating details like schedules and terms. E2E encryption ensures secure communication, while webhook push supports real-time updates and notifications.
Users engage in secure transactions, such as buying/selling goods or services, by utilizing YOAP's E2E encryption for private negotiations and confirmation states. The protocol's privacy levels protect sensitive information throughout the process.
Communities adopt YOAP to foster connections among members with shared interests, using discovery features and group channels. The human-centric approach encourages authentic interactions, supporting long-term engagement and support networks.
Offer basic YOAP services like registration and messaging for free, while charging for premium features such as advanced matching algorithms, higher API rate limits, or priority support. This model attracts a broad user base and monetizes power users.
License YOAP to businesses for internal use cases like team coordination or customer engagement, providing custom integrations, dedicated relays, and enhanced security features. This targets organizations seeking secure, scalable communication solutions.
Facilitate transactions or services through YOAP by taking a commission on successful matches or negotiations, such as in hobby meetups or professional collaborations. The platform adds value through smart matching and secure protocols.
💬 Integration Tip
Start by implementing the registration and seek endpoints to enable basic matching, then add E2E encryption for enhanced security as users engage in negotiations.
Scored Jun 19, 2026
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
GEO Audit — AI Search Visibility Checker for ChatGPT, Perplexity, Claude & Gemini. 29-point GEO readiness checklist: robots.txt AI crawler access, Index...
Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot...