Agentbnb Skill Latest
v8.4.5P2P capability sharing for AI agents — discover, rent, and share skills on the AgentBnB network. Use when you need a capability you don't have, or want to ea...
⭐ 0· 115·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (P2P capability sharing) matches the requested binary (agentbnb), the node install spec (pkg: agentbnb), and the runtime code which delegates to an agentbnb CLI and local ~/.agentbnb config/DB. There are no unrelated credentials or binaries requested.
Instruction Scope
SKILL.md instructs use of the agentbnb CLI only (discover, request, status, openclaw sync). However the packaged code (bootstrap.ts / install.sh / auto-onboard) will automatically initialize the agent (agentbnb init), may run openclaw sync (publishing SOUL.md content), and writes/reads ~/.agentbnb config and identity files. That behavior is consistent with the marketplace purpose but has side effects (auto-init, potential auto-publish of SOUL.md) users should expect.
Install Mechanism
Install uses 'node' (npm/pnpm) to install the agentbnb CLI and includes a post-install install.sh which will attempt global npm/pnpm installs, rebuild native modules, and write files under $HOME. No downloads from obscure URLs were observed, but global package installation and native rebuilds happen automatically — this is standard for CLI packaging but has operational risk (global changes, executes npm install -g).
Credentials
No unrelated environment variables or external credentials are requested. The code reads/writes only agentbnb-specific config paths (~/.agentbnb or per-workspace .agentbnb) and uses process.env for AGENTBNB_DIR / OPENCLAW_NODE_EXEC as expected for runtime control.
Persistence & Privilege
The skill is allowed autonomous invocation (platform default) and its code includes autonomy rules and auto-onboard logic that can initialize identity, publish SOUL.md, and perform credit-based requests. While this aligns with the skill's purpose, it means the installed skill can make network calls, publish capability metadata, and (if configured) auto-execute requests that spend credits without further manual action. The skill is not force-installed (always:false) but can act autonomously when invoked.
Assessment
This skill appears to do what it says (wrap and manage the agentbnb CLI), but it has important side effects you should accept explicitly before installing: it will try to install a global npm package (agentbnb) and pnpm/npm may be invoked automatically; it will create and modify files under $HOME (~/.agentbnb or per-workspace .agentbnb) and persist a runtime.json; on first activation it will auto-initialize an identity and may run 'agentbnb openclaw sync', which can publish your SOUL.md (capability metadata) to the public registry. If you plan to install: (1) review the agentbnb npm package and registry (ensure you trust the publisher), (2) inspect your SOUL.md for sensitive content you don't want published, (3) consider running the install script manually in a controlled environment first, or set AGENTBNB_DIR to an isolated test folder, and (4) verify autonomy/auto-execution thresholds (tier settings) so the agent cannot spend credits or auto-request capabilities without your approval.Like a lobster shell, security has layers — review code before you run it.
agent-skillsvk97befehfk5npaqdecmmzddac183x7q5capability-sharingvk97befehfk5npaqdecmmzddac183x7q5claude-codevk97befehfk5npaqdecmmzddac183x7q5creditsvk97befehfk5npaqdecmmzddac183x7q5latestvk979hryagw7vwqpbqnmnqgkg9h83ye4sp2pvk97befehfk5npaqdecmmzddac183x7q5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🏠 Clawdis
Binsagentbnb
Install
Node
Bins: agentbnb