ClawHub

AgentFiles

v1.0.2

Use this skill when you need to publish, fetch, search, list, share, or watch AgentFiles artifacts from Codex, Claude Code, OpenClaw, or other agent runtimes...

⭐ 0· 99·0 current·0 all-time
by@hammadtq
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description match the requested resources: node + agentfiles CLI (or npx fallback) and the ~/.attach/config.json CLI config are appropriate for a CLI wrapper that publishes/fetches artifacts across runtimes.
ℹ
Instruction Scope
Runtime instructions consistently direct the agent to use the agentfiles CLI or the MCP artifact_publish tool for handoffs. The skill explicitly allows publishing conversation content and files (including verbatim content) to the AgentFiles/MCP server — this is expected for a handoff/publish skill but is a privacy consideration. The skill requires user confirmation before publishing per its rules.
✓
Install Mechanism
Install uses the npm package agentfiles-cli (creates an agentfiles binary). This is an expected, reasonable mechanism for a Node-based CLI. It will require network access on first install; no obscure download URLs or archives are used.
ℹ
Credentials
No environment variables or external credentials are requested, but the skill reuses local CLI config (~/.attach/config.json) which will contain tokens/credentials obtained via a browser-approved flow. Access to that config and the CLI's auth is proportionate to the skill's purpose but could expose existing credentials/artifact visibility if misused.
✓
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It does not modify other skills' configuration. Autonomous invocation is allowed by default but is typical for skills and not, by itself, a flag.
Assessment
This skill is a CLI wrapper that will upload or share files and conversation content to the AgentFiles/MCP service. Before installing or using it: (1) Understand that publishing can send verbatim conversation text and files off the machine—do not publish secrets or private data; (2) Expect the installer to fetch agentfiles-cli from npm (network access) and a browser-based onboarding flow that writes credentials to ~/.attach/config.json; (3) Confirm every handoff/publish operation when prompted; (4) If you require stricter control, run agentfiles whoami / agentfiles config --show to verify the active identity and namespace before publishing; (5) If you need greater assurance, review the agentfiles-cli package on npm (and its source) before allowing the install or network access.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dgfc59345tyq975s841wkcs83j263

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📁 Clawdis
Binsnode
Any binagentfiles, npx
Config~/.attach/config.json

Install

Node
Bins: agentfiles
npm i -g agentfiles-cli

Comments