Agent Wormhole
Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts,... Skill: Agent Wormhole Owner: builtbyecho Summary: Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts,... Tags: latest:0.1.2 Version history: v0.1.2 | 2026-05-26T00:22:15.305Z | user Keep registry skill aligned with sanitized package metadata v0.1.1 | 2026-05-26T00:19:43.288Z | user Sync Agent Wormhole 0.1.1 skill
Rank
62
Safety
84
Downloads
1.1k
Updated
Oct 11, 2026
Version
0.1.2
Source
CLAWHUB
About
What it does, and when to use it.
Capability contract not published. No trust telemetry is available yet. 1.1K downloads reported by the source. Last updated 10/11/2026.
Avoid when
- Contract metadata is missing or unavailable for deterministic execution.
Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing
Public facts
Every fact links back to the source it came from.
- Vendor
- Clawhubvendor · observed Oct 11, 2026
- Protocol compatibility
- OpenClawcompatibility · observed Oct 11, 2026
- Adoption signal
- 1.1K downloadsadoption · observed Oct 11, 2026
- Latest release
- 0.1.2release · observed May 26, 2026
- Handshake status
- UNKNOWNsecurity
Install and run
Setup complexity: low.
clawhub skill install s1719nva0zh5vbbjbpa8vf7nhx85jdr1:agent-wormhole- Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.
- Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.
Contract: missing
curl -s "https://www.xpersona.co/api/v1/agents/clawhub-builtbyecho-agent-wormhole/snapshot"
Documentation
CLAWHUB
18,135 characters of source documentation, loaded on request.
Extracted files
4 files captured from the source.
SKILL.md
---
name: agent-wormhole
description: Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts, config drops, CLI/API usage, ECHO holder access, and Bankr x402 paid opens.
---
# Agent Wormhole
Agent Wormhole opens a temporary encrypted passage for agent handoffs. The payload can be claimed once, then the channel collapses.
Use this skill when a task involves:
- sending or receiving one-time agent handoffs
- passing mission briefs, configs, receipts, files, or scoped secrets
- using the `agent-wormhole` CLI or HTTP API
- checking ECHO holder sponsored access
- checking Bankr x402 paid open status
- deploying or operating the VPS service
## Quick Commands
From a project that has the package installed:
```bash
agent-wormhole send --text "mission brief" --ttl 10m
agent-wormhole send --file ./artifact.tgz --note "handoff bundle"
agent-wormhole inspect <code>
agent-wormhole receive <code> --out ./received
agent-wormhole cleanup --delete-claimed-older-than 15m
```
For one-off use without installing globally:
```bash
npx @builtbyecho/agent-wormhole send --text "mission brief"
```
## Mental Model
- Codes are `id.secret`.
- `id` locates stored metadata.
- `secret` derives the AES-256-GCM decrypt key and is not stored.
- Default TTL is 10 minutes.
- Max TTL is 24 hours unless explicitly configured lower.
- Default max payload is 5 MB.
- Receipts are written for opens and claims.
## Access Paths
- Local CLI/library opens record `access.path = local`.
- Direct API holder opens require an EIP-191 signature from a wallet holding at least `50,000,000 ECHO` on Base and record `access.path = echo_holder`.
- Bankr x402 paid opens are handled by `agent-wormhole-open` and record `access.path = x402_paid`.
- Claiming is free.
## Live Endpoints
- Direct holder/API route: `https://storage.builtbyecho.xyz/agent-wormhole`
- Bankr x402 paid open: `https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open`
- VPS local service: `http://127.0.0.1:8791`
## Verification
From the package root:
```bash
npm test
node --check src/cli.js
node --check src/index.js
node --check src/server.js
npm pack --json --dry-run
```
For live health:
```bash
curl -sS https://storage.builtbyecho.xyz/agent-wormhole/health
```
For Bankr status, check both registry and execution:
```bash
bankr --config "$BANKR_OWNER_CONFIG" x402 list
bankr x402 schema https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open
bankr --config "$BANKR_PAYER_CONFIG" x402 call -X POST -d '{"payload":"dGVzdA=="}' --max-payment 0.01 -y --raw https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open
```
Set `BANKR_OWNER_CONFIG` to the endpoint owner/operator config and `BANKR_PAYER_CONFIG` to a separate payer config. Do not treat registry active status alone as proof that paid x402 execution works. A real paid call from a n_meta.json
{
"ownerId": "kn788ycwjjfc27w9rytz2e7wxs85jnzh",
"slug": "agent-wormhole",
"version": "0.1.2",
"publishedAt": 1779754935305
}skill-card.md
## Description: Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts, config drops, CLI/API usage, ECHO holder access, and Bankr x402 paid opens. This skill is ready for commercial/non-commercial use. ## Publisher: [builtbyecho](https://clawhub.ai/user/builtbyecho) ### License/Terms of Use: MIT-0 ## Use Case: Developers and agents use Agent Wormhole to create one-time encrypted handoffs for mission briefs, scoped secrets, temporary artifacts, receipts, and configuration drops. It also guides use of the CLI/API, ECHO holder access, Bankr x402 paid opens, and service operation checks. ### Deployment Geography for Use: Global ## Known Risks and Mitigations: Risk: The skill asks users to run an unpinned external npm package in workflows that may involve secrets, private files, and wallet or payment configuration. Mitigation: Use a pinned, reviewed package version in an isolated project with only required files and environment variables exposed. Risk: Bankr x402 commands may perform real paid operations even when a maximum payment value is shown. Mitigation: Treat Bankr x402 calls as real payments, use a separate payer wallet from the endpoint owner wallet, and verify intent before execution. Risk: Wormhole codes grant one-time access to encrypted payloads and can expose the payload if shared publicly. Mitigation: Share codes only with intended recipients, avoid logging plaintext secrets or payloads, prefer short TTLs, and clean up received artifacts when no longer needed. ## Reference(s): - [Agent Wormhole ClawHub page](https://clawhub.ai/builtbyecho/skills/agent-wormhole) - [Agent Wormhole holder/API route](https://storage.builtbyecho.xyz/agent-wormhole) - [Agent Wormhole health endpoint](https://storage.builtbyecho.xyz/agent-wormhole/health) - [Bankr x402 paid open endpoint](https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open) ## Skill Output: **Output Type(s):** [Text, Markdown, Shell commands, Configuration, Guidance] **Output Format:** [Markdown with inline bash commands and operational guidance] **Output Parameters:** [1D] **Other Properties Related to Output:** [May include CLI/API commands, endpoint checks, wallet/payment handling guidance, and safety reminders for encrypted one-time handoffs.] ## Skill Version(s): 0.1.2 (source: server release evidence) ## Ethical Considerations: Users should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.
agents/openai.yaml
display_name: Agent Wormhole short_description: One-time sealed handoffs for autonomous agents. default_prompt: Use Agent Wormhole to open a temporary encrypted passage for a mission brief, scoped secret, artifact, receipt, or config drop that can be claimed once.
AionUi
Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!
activepieces
AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents
cherry-studio
AI productivity studio with smart chat, autonomous agents, and 300+ assistants.
CopilotKit
The Frontend for Agents & Generative UI. React + Angular
Machine-readable data
The same record, as JSON, for agents and crawlers.
{
"facts": [
{
"factKey": "vendor",
"category": "vendor",
"label": "Vendor",
"value": "Clawhub",
"href": "https://clawhub.ai/builtbyecho/skills/agent-wormhole",
"sourceUrl": "https://clawhub.ai/builtbyecho/skills/agent-wormhole",
"sourceType": "profile",
"confidence": "medium",
"observedAt": "2026-10-11T13:54:02.855Z",
"isPublic": true
},
{
"factKey": "protocols",
"category": "compatibility",
"label": "Protocol compatibility",
"value": "OpenClaw",
"href": "https://www.xpersona.co/api/v1/agents/clawhub-builtbyecho-agent-wormhole/contract",
"sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-builtbyecho-agent-wormhole/contract",
"sourceType": "contract",
"confidence": "medium",
"observedAt": "2026-10-11T13:54:02.855Z",
"isPublic": true
},
{
"factKey": "traction",
"category": "adoption",
"label": "Adoption signal",
"value": "1.1K downloads",
"href": "https://clawhub.ai/builtbyecho/agent-wormhole",
"sourceUrl": "https://clawhub.ai/builtbyecho/agent-wormhole",
"sourceType": "profile",
"confidence": "medium",
"observedAt": "2026-10-11T13:54:02.855Z",
"isPublic": true
},
{
"factKey": "latest_release",
"category": "release",
"label": "Latest release",
"value": "0.1.2",
"href": "https://clawhub.ai/builtbyecho/agent-wormhole",
"sourceUrl": "https://clawhub.ai/builtbyecho/agent-wormhole",
"sourceType": "release",
"confidence": "medium",
"observedAt": "2026-05-26T00:22:15.305Z",
"isPublic": true
},
{
"factKey": "handshake_status",
"category": "security",
"label": "Handshake status",
"value": "UNKNOWN",
"href": "https://www.xpersona.co/api/v1/agents/clawhub-builtbyecho-agent-wormhole/trust",
"sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-builtbyecho-agent-wormhole/trust",
"sourceType": "trust",
"confidence": "medium",
"observedAt": null,
"isPublic": true
}
],
"events": [
{
"eventType": "release",
"title": "Release 0.1.2",
"description": "Keep registry skill aligned with sanitized package metadata",
"href": "https://clawhub.ai/builtbyecho/agent-wormhole",
"sourceUrl": "https://clawhub.ai/builtbyecho/agent-wormhole",
"sourceType": "release",
"confidence": "medium",
"observedAt": "2026-05-26T00:22:15.305Z",
"isPublic": true
}
]
}Record generated Oct 11, 2026.
