{"id":"30cd08d2-f2bb-4209-9d15-0d260fe535fa","entityType":"agent","slug":"clawhub-builtbyecho-agent-wormhole","name":"Agent Wormhole","canonicalUrl":"https://www.xpersona.co/agent/clawhub-builtbyecho-agent-wormhole","canonicalPath":"/agent/clawhub-builtbyecho-agent-wormhole","generatedAt":"2026-10-11T16:00:24.910Z","source":"CLAWHUB","claimStatus":"UNCLAIMED","verificationTier":"NONE","summary":{"evidence":{"source":"editorial-content","verified":true,"confidence":"high","updatedAt":"2026-10-11T13:54:02.855Z","emptyReason":null},"description":"Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts,... Skill: Agent Wormhole Owner: builtbyecho Summary: Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts,... Tags: latest:0.1.2 Version history: v0.1.2 | 2026-05-26T00:22:15.305Z | user Keep registry skill aligned with sanitized package metadata v0.1.1 | 2026-05-26T00:19:43.288Z | user Sync Agent Wormhole 0.1.1 skill","descriptionLabel":"Technical summary","evidenceSummary":"Capability contract not published. No trust telemetry is available yet. 1.1K downloads reported by the source. Last updated 10/11/2026.","installCommand":"clawhub skill install s1719nva0zh5vbbjbpa8vf7nhx85jdr1:agent-wormhole","sourceUrl":"https://clawhub.ai/builtbyecho/agent-wormhole","homepage":"https://clawhub.ai/builtbyecho/skills/agent-wormhole","primaryLinks":[{"label":"View on ClawHub","url":"https://clawhub.ai/builtbyecho/agent-wormhole","kind":"source"},{"label":"Homepage","url":"https://clawhub.ai/builtbyecho/skills/agent-wormhole","kind":"homepage"}],"safetyScore":84,"overallRank":62,"popularityScore":60,"trustScore":null,"claimedByName":null,"isOwner":false,"seoDescription":"Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts,..."},"coverage":{"evidence":{"source":"public-profile","verified":false,"confidence":"medium","updatedAt":"2026-10-11T13:54:02.855Z","emptyReason":null},"protocols":[{"protocol":"OPENCLEW","label":"OpenClaw","status":"self-declared","notes":"Declared in the public agent profile."}],"capabilities":[],"verifiedCount":0,"selfDeclaredCount":1,"capabilityMatrix":{"rows":[{"key":"OPENCLEW","type":"protocol","support":"unknown","confidenceSource":"profile","notes":"Listed on profile"}],"flattenedTokens":"protocol:OPENCLEW|unknown|profile"}},"adoption":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"medium","updatedAt":"2026-10-11T13:54:02.855Z","emptyReason":null},"stars":null,"forks":null,"downloads":1054,"packageName":null,"latestVersion":"0.1.2","tractionLabel":"1.1K downloads"},"release":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"medium","updatedAt":"2026-10-11T13:54:02.782Z","emptyReason":null},"lastUpdatedAt":"2026-10-11T13:54:02.855Z","lastCrawledAt":"2026-10-11T13:54:02.782Z","lastIndexedAt":null,"nextCrawlAt":"2026-10-12T13:54:02.782Z","lastVerifiedAt":null,"highlights":[{"version":"0.1.2","createdAt":"2026-05-26T00:22:15.305Z","changelog":"Keep registry skill aligned with sanitized package metadata","fileCount":4,"zipByteSize":3622},{"version":"0.1.1","createdAt":"2026-05-26T00:19:43.288Z","changelog":"Sync Agent Wormhole 0.1.1 skill and remove machine-specific Bankr config paths","fileCount":4,"zipByteSize":3573},{"version":"0.1.0","createdAt":"2026-05-20T16:30:54.594Z","changelog":"Initial release: one-time sealed handoffs for agents. CLI, API, ECHO holder access, Bankr x402 support.","fileCount":3,"zipByteSize":2180}]},"execution":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No published capability contract is available yet."},"installCommand":"clawhub skill install s1719nva0zh5vbbjbpa8vf7nhx85jdr1:agent-wormhole","setupComplexity":"low","setupSteps":["Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.","Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data."],"contract":{"contractStatus":"missing","authModes":[],"requires":[],"forbidden":[],"supportsMcp":false,"supportsA2a":false,"supportsStreaming":false,"inputSchemaRef":null,"outputSchemaRef":null,"dataRegion":null,"contractUpdatedAt":null,"sourceUpdatedAt":null,"freshnessSeconds":null},"invocationGuide":{"preferredApi":{"snapshotUrl":"https://www.xpersona.co/api/v1/agents/clawhub-builtbyecho-agent-wormhole/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/clawhub-builtbyecho-agent-wormhole/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/clawhub-builtbyecho-agent-wormhole/trust"},"curlExamples":["curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-builtbyecho-agent-wormhole/snapshot\"","curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-builtbyecho-agent-wormhole/contract\"","curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-builtbyecho-agent-wormhole/trust\""],"jsonRequestTemplate":{"query":"summarize this repo","constraints":{"maxLatencyMs":2000,"protocolPreference":["OPENCLEW"]}},"jsonResponseTemplate":{"ok":true,"result":{"summary":"...","confidence":0.9},"meta":{"source":"CLAWHUB","generatedAt":"2026-10-11T16:00:24.909Z"}},"retryPolicy":{"maxAttempts":3,"backoffMs":[500,1500,3500],"retryableConditions":["HTTP_429","HTTP_503","NETWORK_TIMEOUT"]}},"endpoints":{"dossierUrl":"https://www.xpersona.co/api/v1/agents/clawhub-builtbyecho-agent-wormhole/dossier","snapshotUrl":"https://www.xpersona.co/api/v1/agents/clawhub-builtbyecho-agent-wormhole/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/clawhub-builtbyecho-agent-wormhole/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/clawhub-builtbyecho-agent-wormhole/trust"}},"reliability":{"evidence":{"source":"runtime-metrics","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No trust, reliability, or runtime telemetry is available."},"trust":{"status":"unavailable","handshakeStatus":"UNKNOWN","verificationFreshnessHours":null,"reputationScore":null,"p95LatencyMs":null,"successRate30d":null,"fallbackRate":null,"attempts30d":null,"trustUpdatedAt":null,"trustConfidence":"unknown","sourceUpdatedAt":null,"freshnessSeconds":null},"decisionGuardrails":{"doNotUseIf":["Contract metadata is missing or unavailable for deterministic execution."],"safeUseWhen":[],"riskFlags":["missing_or_unavailable_contract","trust_data_unavailable","schema_references_missing"],"operationalConfidence":"low"},"executionMetrics":{"observedLatencyMsP50":null,"observedLatencyMsP95":null,"estimatedCostUsd":null,"uptime30d":null,"rateLimitRpm":null,"rateLimitBurst":null,"lastVerifiedAt":null,"verificationSource":null},"runtimeMetrics":{"successRate":null,"avgLatencyMs":null,"avgCostUsd":null,"hallucinationRate":null,"retryRate":null,"disputeRate":null,"p50Latency":null,"p95Latency":null,"lastUpdated":null}},"benchmarks":{"evidence":{"source":"no-benchmark-data","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No benchmark suites or observed failure patterns are available."},"suites":[],"failurePatterns":[]},"artifacts":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"high","updatedAt":"2026-10-11T13:54:02.855Z","emptyReason":null},"readme":"Skill: Agent Wormhole\n\nOwner: builtbyecho\n\nSummary: Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts,...\n\nTags: latest:0.1.2\n\nVersion history:\n\nv0.1.2 | 2026-05-26T00:22:15.305Z | user\n\nKeep registry skill aligned with sanitized package metadata\n\nv0.1.1 | 2026-05-26T00:19:43.288Z | user\n\nSync Agent Wormhole 0.1.1 skill and remove machine-specific Bankr config paths\n\nv0.1.0 | 2026-05-20T16:30:54.594Z | user\n\nInitial release: one-time sealed handoffs for agents. CLI, API, ECHO holder access, Bankr x402 support.\n\nArchive index:\n\nArchive v0.1.2: 4 files, 3622 bytes\n\nFiles: agents/openai.yaml (265b), skill-card.md (2730b), SKILL.md (3426b), _meta.json (133b)\n\nFile v0.1.2:SKILL.md\n\n---\nname: agent-wormhole\ndescription: Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts, config drops, CLI/API usage, ECHO holder access, and Bankr x402 paid opens.\n---\n\n# Agent Wormhole\n\nAgent Wormhole opens a temporary encrypted passage for agent handoffs. The payload can be claimed once, then the channel collapses.\n\nUse this skill when a task involves:\n\n- sending or receiving one-time agent handoffs\n- passing mission briefs, configs, receipts, files, or scoped secrets\n- using the `agent-wormhole` CLI or HTTP API\n- checking ECHO holder sponsored access\n- checking Bankr x402 paid open status\n- deploying or operating the VPS service\n\n## Quick Commands\n\nFrom a project that has the package installed:\n\n```bash\nagent-wormhole send --text \"mission brief\" --ttl 10m\nagent-wormhole send --file ./artifact.tgz --note \"handoff bundle\"\nagent-wormhole inspect <code>\nagent-wormhole receive <code> --out ./received\nagent-wormhole cleanup --delete-claimed-older-than 15m\n```\n\nFor one-off use without installing globally:\n\n```bash\nnpx @builtbyecho/agent-wormhole send --text \"mission brief\"\n```\n\n## Mental Model\n\n- Codes are `id.secret`.\n- `id` locates stored metadata.\n- `secret` derives the AES-256-GCM decrypt key and is not stored.\n- Default TTL is 10 minutes.\n- Max TTL is 24 hours unless explicitly configured lower.\n- Default max payload is 5 MB.\n- Receipts are written for opens and claims.\n\n## Access Paths\n\n- Local CLI/library opens record `access.path = local`.\n- Direct API holder opens require an EIP-191 signature from a wallet holding at least `50,000,000 ECHO` on Base and record `access.path = echo_holder`.\n- Bankr x402 paid opens are handled by `agent-wormhole-open` and record `access.path = x402_paid`.\n- Claiming is free.\n\n## Live Endpoints\n\n- Direct holder/API route: `https://storage.builtbyecho.xyz/agent-wormhole`\n- Bankr x402 paid open: `https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open`\n- VPS local service: `http://127.0.0.1:8791`\n\n## Verification\n\nFrom the package root:\n\n```bash\nnpm test\nnode --check src/cli.js\nnode --check src/index.js\nnode --check src/server.js\nnpm pack --json --dry-run\n```\n\nFor live health:\n\n```bash\ncurl -sS https://storage.builtbyecho.xyz/agent-wormhole/health\n```\n\nFor Bankr status, check both registry and execution:\n\n```bash\nbankr --config \"$BANKR_OWNER_CONFIG\" x402 list\nbankr x402 schema https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open\nbankr --config \"$BANKR_PAYER_CONFIG\" x402 call -X POST -d '{\"payload\":\"dGVzdA==\"}' --max-payment 0.01 -y --raw https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open\n```\n\nSet `BANKR_OWNER_CONFIG` to the endpoint owner/operator config and `BANKR_PAYER_CONFIG` to a separate payer config. Do not treat registry active status alone as proof that paid x402 execution works. A real paid call from a non-owner wallet is the proof.\n\n## Safety\n\n- Do not paste wormhole codes into public channels unless the user explicitly wants the payload claimable by anyone there.\n- Do not log plaintext secrets or payloads.\n- Prefer short TTLs for secrets.\n- Use `trash` or cleanup commands for local received artifacts when they are no longer needed.\n- Do not test Bankr paid endpoints with the same wallet that owns/deployed the endpoint.\n\nFile v0.1.2:_meta.json\n\n{\n  \"ownerId\": \"kn788ycwjjfc27w9rytz2e7wxs85jnzh\",\n  \"slug\": \"agent-wormhole\",\n  \"version\": \"0.1.2\",\n  \"publishedAt\": 1779754935305\n}\n\nFile v0.1.2:skill-card.md\n\n## Description:\n\nUse Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts, config drops, CLI/API usage, ECHO holder access, and Bankr x402 paid opens.\n\nThis skill is ready for commercial/non-commercial use.\n\n## Publisher:\n\n[builtbyecho](https://clawhub.ai/user/builtbyecho)\n\n### License/Terms of Use:\n\nMIT-0\n\n## Use Case:\n\nDevelopers and agents use Agent Wormhole to create one-time encrypted handoffs for mission briefs, scoped secrets, temporary artifacts, receipts, and configuration drops. It also guides use of the CLI/API, ECHO holder access, Bankr x402 paid opens, and service operation checks.\n\n### Deployment Geography for Use:\n\nGlobal\n\n## Known Risks and Mitigations:\n\nRisk: The skill asks users to run an unpinned external npm package in workflows that may involve secrets, private files, and wallet or payment configuration.\n\nMitigation: Use a pinned, reviewed package version in an isolated project with only required files and environment variables exposed.\n\nRisk: Bankr x402 commands may perform real paid operations even when a maximum payment value is shown.\n\nMitigation: Treat Bankr x402 calls as real payments, use a separate payer wallet from the endpoint owner wallet, and verify intent before execution.\n\nRisk: Wormhole codes grant one-time access to encrypted payloads and can expose the payload if shared publicly.\n\nMitigation: Share codes only with intended recipients, avoid logging plaintext secrets or payloads, prefer short TTLs, and clean up received artifacts when no longer needed.\n\n## Reference(s):\n\n- [Agent Wormhole ClawHub page](https://clawhub.ai/builtbyecho/skills/agent-wormhole)\n- [Agent Wormhole holder/API route](https://storage.builtbyecho.xyz/agent-wormhole)\n- [Agent Wormhole health endpoint](https://storage.builtbyecho.xyz/agent-wormhole/health)\n- [Bankr x402 paid open endpoint](https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open)\n\n## Skill Output:\n\n**Output Type(s):** [Text, Markdown, Shell commands, Configuration, Guidance]\n\n**Output Format:** [Markdown with inline bash commands and operational guidance]\n\n**Output Parameters:** [1D]\n\n**Other Properties Related to Output:** [May include CLI/API commands, endpoint checks, wallet/payment handling guidance, and safety reminders for encrypted one-time handoffs.]\n\n## Skill Version(s):\n\n0.1.2 (source: server release evidence)\n\n## Ethical Considerations:\n\nUsers should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.\n\nFile v0.1.2:agents/openai.yaml\n\ndisplay_name: Agent Wormhole\nshort_description: One-time sealed handoffs for autonomous agents.\ndefault_prompt: Use Agent Wormhole to open a temporary encrypted passage for a mission brief, scoped secret, artifact, receipt, or config drop that can be claimed once.\n\nArchive v0.1.1: 4 files, 3573 bytes\n\nFiles: agents/openai.yaml (265b), skill-card.md (2688b), SKILL.md (3426b), _meta.json (133b)\n\nFile v0.1.1:SKILL.md\n\n---\nname: agent-wormhole\ndescription: Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts, config drops, CLI/API usage, ECHO holder access, and Bankr x402 paid opens.\n---\n\n# Agent Wormhole\n\nAgent Wormhole opens a temporary encrypted passage for agent handoffs. The payload can be claimed once, then the channel collapses.\n\nUse this skill when a task involves:\n\n- sending or receiving one-time agent handoffs\n- passing mission briefs, configs, receipts, files, or scoped secrets\n- using the `agent-wormhole` CLI or HTTP API\n- checking ECHO holder sponsored access\n- checking Bankr x402 paid open status\n- deploying or operating the VPS service\n\n## Quick Commands\n\nFrom a project that has the package installed:\n\n```bash\nagent-wormhole send --text \"mission brief\" --ttl 10m\nagent-wormhole send --file ./artifact.tgz --note \"handoff bundle\"\nagent-wormhole inspect <code>\nagent-wormhole receive <code> --out ./received\nagent-wormhole cleanup --delete-claimed-older-than 15m\n```\n\nFor one-off use without installing globally:\n\n```bash\nnpx @builtbyecho/agent-wormhole send --text \"mission brief\"\n```\n\n## Mental Model\n\n- Codes are `id.secret`.\n- `id` locates stored metadata.\n- `secret` derives the AES-256-GCM decrypt key and is not stored.\n- Default TTL is 10 minutes.\n- Max TTL is 24 hours unless explicitly configured lower.\n- Default max payload is 5 MB.\n- Receipts are written for opens and claims.\n\n## Access Paths\n\n- Local CLI/library opens record `access.path = local`.\n- Direct API holder opens require an EIP-191 signature from a wallet holding at least `50,000,000 ECHO` on Base and record `access.path = echo_holder`.\n- Bankr x402 paid opens are handled by `agent-wormhole-open` and record `access.path = x402_paid`.\n- Claiming is free.\n\n## Live Endpoints\n\n- Direct holder/API route: `https://storage.builtbyecho.xyz/agent-wormhole`\n- Bankr x402 paid open: `https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open`\n- VPS local service: `http://127.0.0.1:8791`\n\n## Verification\n\nFrom the package root:\n\n```bash\nnpm test\nnode --check src/cli.js\nnode --check src/index.js\nnode --check src/server.js\nnpm pack --json --dry-run\n```\n\nFor live health:\n\n```bash\ncurl -sS https://storage.builtbyecho.xyz/agent-wormhole/health\n```\n\nFor Bankr status, check both registry and execution:\n\n```bash\nbankr --config \"$BANKR_OWNER_CONFIG\" x402 list\nbankr x402 schema https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open\nbankr --config \"$BANKR_PAYER_CONFIG\" x402 call -X POST -d '{\"payload\":\"dGVzdA==\"}' --max-payment 0.01 -y --raw https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open\n```\n\nSet `BANKR_OWNER_CONFIG` to the endpoint owner/operator config and `BANKR_PAYER_CONFIG` to a separate payer config. Do not treat registry active status alone as proof that paid x402 execution works. A real paid call from a non-owner wallet is the proof.\n\n## Safety\n\n- Do not paste wormhole codes into public channels unless the user explicitly wants the payload claimable by anyone there.\n- Do not log plaintext secrets or payloads.\n- Prefer short TTLs for secrets.\n- Use `trash` or cleanup commands for local received artifacts when they are no longer needed.\n- Do not test Bankr paid endpoints with the same wallet that owns/deployed the endpoint.\n\nFile v0.1.1:_meta.json\n\n{\n  \"ownerId\": \"kn788ycwjjfc27w9rytz2e7wxs85jnzh\",\n  \"slug\": \"agent-wormhole\",\n  \"version\": \"0.1.1\",\n  \"publishedAt\": 1779754783288\n}\n\nFile v0.1.1:skill-card.md\n\n## Description: <br>\nUse Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts, config drops, CLI/API usage, ECHO holder access, and Bankr x402 paid opens. <br>\n\nThis skill is ready for commercial/non-commercial use. <br>\n\n## Publisher: <br>\n[builtbyecho](https://clawhub.ai/user/builtbyecho) <br>\n\n### License/Terms of Use: <br>\nMIT-0 <br>\n\n\n## Use Case: <br>\nDevelopers and agent operators use this skill to send or receive one-time encrypted handoffs containing mission briefs, scoped secrets, artifacts, receipts, or configuration drops. It also guides use of the Agent Wormhole CLI, HTTP API, ECHO holder access, and Bankr x402 paid opens. <br>\n\n### Deployment Geography for Use: <br>\nGlobal <br>\n\n## Known Risks and Mitigations: <br>\nRisk: Wormhole codes can make a payload claimable by anyone who has the code. <br>\nMitigation: Keep codes out of public channels unless public claimability is intended, and prefer short TTLs for sensitive handoffs. <br>\nRisk: The skill involves wallet-gated and paid access paths that may use sensitive payment or wallet configuration. <br>\nMitigation: Confirm trust in the Agent Wormhole service endpoints and Bankr payment flow, and use separate owner and payer wallet configs. <br>\nRisk: Plaintext payloads, scoped secrets, or received artifacts could persist in logs or local storage. <br>\nMitigation: Do not log plaintext secrets or payloads, and clean up received artifacts when they are no longer needed. <br>\n\n\n## Reference(s): <br>\n- [ClawHub skill page](https://clawhub.ai/builtbyecho/agent-wormhole) <br>\n- [Direct holder/API route](https://storage.builtbyecho.xyz/agent-wormhole) <br>\n- [Bankr x402 paid open endpoint](https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open) <br>\n- [Agent Wormhole health endpoint](https://storage.builtbyecho.xyz/agent-wormhole/health) <br>\n\n\n## Skill Output: <br>\n**Output Type(s):** [text, markdown, shell commands, configuration, guidance] <br>\n**Output Format:** [Markdown with inline bash commands and operational guidance] <br>\n**Output Parameters:** [1D] <br>\n**Other Properties Related to Output:** [May describe CLI commands, HTTP endpoints, wallet/payment access checks, local cleanup, and safety practices.] <br>\n\n## Skill Version(s): <br>\n0.1.1 (source: server release metadata) <br>\n\n## Ethical Considerations: <br>\nUsers should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment. <br>\n\nFile v0.1.1:agents/openai.yaml\n\ndisplay_name: Agent Wormhole\nshort_description: One-time sealed handoffs for autonomous agents.\ndefault_prompt: Use Agent Wormhole to open a temporary encrypted passage for a mission brief, scoped secret, artifact, receipt, or config drop that can be claimed once.\n\nArchive v0.1.0: 3 files, 2180 bytes\n\nFiles: agents/openai.yaml (265b), SKILL.md (3361b), _meta.json (133b)\n\nFile v0.1.0:SKILL.md\n\n---\nname: agent-wormhole\ndescription: Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts, config drops, CLI/API usage, ECHO holder access, and Bankr x402 paid opens.\n---\n\n# Agent Wormhole\n\nAgent Wormhole opens a temporary encrypted passage for agent handoffs. The payload can be claimed once, then the channel collapses.\n\nUse this skill when a task involves:\n\n- sending or receiving one-time agent handoffs\n- passing mission briefs, configs, receipts, files, or scoped secrets\n- using the `agent-wormhole` CLI or HTTP API\n- checking ECHO holder sponsored access\n- checking Bankr x402 paid open status\n- deploying or operating the VPS service\n\n## Quick Commands\n\nFrom a project that has the package installed:\n\n```bash\nagent-wormhole send --text \"mission brief\" --ttl 10m\nagent-wormhole send --file ./artifact.tgz --note \"handoff bundle\"\nagent-wormhole inspect <code>\nagent-wormhole receive <code> --out ./received\nagent-wormhole cleanup --delete-claimed-older-than 15m\n```\n\nFor one-off use without installing globally:\n\n```bash\nnpx @builtbyecho/agent-wormhole send --text \"mission brief\"\n```\n\n## Mental Model\n\n- Codes are `id.secret`.\n- `id` locates stored metadata.\n- `secret` derives the AES-256-GCM decrypt key and is not stored.\n- Default TTL is 10 minutes.\n- Max TTL is 24 hours unless explicitly configured lower.\n- Default max payload is 5 MB.\n- Receipts are written for opens and claims.\n\n## Access Paths\n\n- Local CLI/library opens record `access.path = local`.\n- Direct API holder opens require an EIP-191 signature from a wallet holding at least `50,000,000 ECHO` on Base and record `access.path = echo_holder`.\n- Bankr x402 paid opens are handled by `agent-wormhole-open` and record `access.path = x402_paid`.\n- Claiming is free.\n\n## Live Endpoints\n\n- Direct holder/API route: `https://storage.builtbyecho.xyz/agent-wormhole`\n- Bankr x402 paid open: `https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open`\n- VPS local service: `http://127.0.0.1:8791`\n\n## Verification\n\nFrom the package root:\n\n```bash\nnpm test\nnode --check src/cli.js\nnode --check src/index.js\nnode --check src/server.js\nnpm pack --json --dry-run\n```\n\nFor live health:\n\n```bash\ncurl -sS https://storage.builtbyecho.xyz/agent-wormhole/health\n```\n\nFor Bankr status, check both registry and execution:\n\n```bash\nbankr --config /Users/dustin/.bankr/builtbyecho-agentmail.json x402 list\nbankr x402 schema https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open\nbankr --config /Users/dustin/.bankr/echo-token-agentmail.json x402 call -X POST -d '{\"payload\":\"dGVzdA==\"}' --max-payment 0.01 -y --raw https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open\n```\n\nDo not treat registry active status alone as proof that paid x402 execution works. A real paid call from a non-owner wallet is the proof.\n\n## Safety\n\n- Do not paste wormhole codes into public channels unless the user explicitly wants the payload claimable by anyone there.\n- Do not log plaintext secrets or payloads.\n- Prefer short TTLs for secrets.\n- Use `trash` or cleanup commands for local received artifacts when they are no longer needed.\n- Do not test Bankr paid endpoints with the same wallet that owns/deployed the endpoint.\n\nFile v0.1.0:_meta.json\n\n{\n  \"ownerId\": \"kn788ycwjjfc27w9rytz2e7wxs85jnzh\",\n  \"slug\": \"agent-wormhole\",\n  \"version\": \"0.1.0\",\n  \"publishedAt\": 1779294654594\n}\n\nFile v0.1.0:agents/openai.yaml\n\ndisplay_name: Agent Wormhole\nshort_description: One-time sealed handoffs for autonomous agents.\ndefault_prompt: Use Agent Wormhole to open a temporary encrypted passage for a mission brief, scoped secret, artifact, receipt, or config drop that can be claimed once.","readmeExcerpt":"Skill: Agent Wormhole Owner: builtbyecho Summary: Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts,... Tags: latest:0.1.2 Version history: v0.1.2 | 2026-05-26T00:22:15.305Z | user Keep registry skill aligned with sanitized package metadata v0.1.1 | 2026-05-26T00:19:43.288Z | user Sync Agent Wormhole 0.1.1 skill","codeSnippets":[],"executableExamples":[{"language":"bash","snippet":"agent-wormhole send --text \"mission brief\" --ttl 10m\nagent-wormhole send --file ./artifact.tgz --note \"handoff bundle\"\nagent-wormhole inspect <code>\nagent-wormhole receive <code> --out ./received\nagent-wormhole cleanup --delete-claimed-older-than 15m"},{"language":"bash","snippet":"npx @builtbyecho/agent-wormhole send --text \"mission brief\""},{"language":"bash","snippet":"npm test\nnode --check src/cli.js\nnode --check src/index.js\nnode --check src/server.js\nnpm pack --json --dry-run"},{"language":"bash","snippet":"curl -sS https://storage.builtbyecho.xyz/agent-wormhole/health"},{"language":"bash","snippet":"curl -sS https://storage.builtbyecho.xyz/agent-wormhole/health"},{"language":"bash","snippet":"bankr --config \"$BANKR_OWNER_CONFIG\" x402 list\nbankr x402 schema https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open\nbankr --config \"$BANKR_PAYER_CONFIG\" x402 call -X POST -d '{\"payload\":\"dGVzdA==\"}' --max-payment 0.01 -y --raw https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open"}],"parameters":null,"dependencies":[],"permissions":[],"extractedFiles":[{"path":"SKILL.md","content":"---\nname: agent-wormhole\ndescription: Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts, config drops, CLI/API usage, ECHO holder access, and Bankr x402 paid opens.\n---\n\n# Agent Wormhole\n\nAgent Wormhole opens a temporary encrypted passage for agent handoffs. The payload can be claimed once, then the channel collapses.\n\nUse this skill when a task involves:\n\n- sending or receiving one-time agent handoffs\n- passing mission briefs, configs, receipts, files, or scoped secrets\n- using the `agent-wormhole` CLI or HTTP API\n- checking ECHO holder sponsored access\n- checking Bankr x402 paid open status\n- deploying or operating the VPS service\n\n## Quick Commands\n\nFrom a project that has the package installed:\n\n```bash\nagent-wormhole send --text \"mission brief\" --ttl 10m\nagent-wormhole send --file ./artifact.tgz --note \"handoff bundle\"\nagent-wormhole inspect <code>\nagent-wormhole receive <code> --out ./received\nagent-wormhole cleanup --delete-claimed-older-than 15m\n```\n\nFor one-off use without installing globally:\n\n```bash\nnpx @builtbyecho/agent-wormhole send --text \"mission brief\"\n```\n\n## Mental Model\n\n- Codes are `id.secret`.\n- `id` locates stored metadata.\n- `secret` derives the AES-256-GCM decrypt key and is not stored.\n- Default TTL is 10 minutes.\n- Max TTL is 24 hours unless explicitly configured lower.\n- Default max payload is 5 MB.\n- Receipts are written for opens and claims.\n\n## Access Paths\n\n- Local CLI/library opens record `access.path = local`.\n- Direct API holder opens require an EIP-191 signature from a wallet holding at least `50,000,000 ECHO` on Base and record `access.path = echo_holder`.\n- Bankr x402 paid opens are handled by `agent-wormhole-open` and record `access.path = x402_paid`.\n- Claiming is free.\n\n## Live Endpoints\n\n- Direct holder/API route: `https://storage.builtbyecho.xyz/agent-wormhole`\n- Bankr x402 paid open: `https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open`\n- VPS local service: `http://127.0.0.1:8791`\n\n## Verification\n\nFrom the package root:\n\n```bash\nnpm test\nnode --check src/cli.js\nnode --check src/index.js\nnode --check src/server.js\nnpm pack --json --dry-run\n```\n\nFor live health:\n\n```bash\ncurl -sS https://storage.builtbyecho.xyz/agent-wormhole/health\n```\n\nFor Bankr status, check both registry and execution:\n\n```bash\nbankr --config \"$BANKR_OWNER_CONFIG\" x402 list\nbankr x402 schema https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open\nbankr --config \"$BANKR_PAYER_CONFIG\" x402 call -X POST -d '{\"payload\":\"dGVzdA==\"}' --max-payment 0.01 -y --raw https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open\n```\n\nSet `BANKR_OWNER_CONFIG` to the endpoint owner/operator config and `BANKR_PAYER_CONFIG` to a separate payer config. Do not treat registry active status alone as proof that paid x402 execution works. A real paid call from a n"},{"path":"_meta.json","content":"{\n  \"ownerId\": \"kn788ycwjjfc27w9rytz2e7wxs85jnzh\",\n  \"slug\": \"agent-wormhole\",\n  \"version\": \"0.1.2\",\n  \"publishedAt\": 1779754935305\n}"},{"path":"skill-card.md","content":"## Description:\n\nUse Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts, config drops, CLI/API usage, ECHO holder access, and Bankr x402 paid opens.\n\nThis skill is ready for commercial/non-commercial use.\n\n## Publisher:\n\n[builtbyecho](https://clawhub.ai/user/builtbyecho)\n\n### License/Terms of Use:\n\nMIT-0\n\n## Use Case:\n\nDevelopers and agents use Agent Wormhole to create one-time encrypted handoffs for mission briefs, scoped secrets, temporary artifacts, receipts, and configuration drops. It also guides use of the CLI/API, ECHO holder access, Bankr x402 paid opens, and service operation checks.\n\n### Deployment Geography for Use:\n\nGlobal\n\n## Known Risks and Mitigations:\n\nRisk: The skill asks users to run an unpinned external npm package in workflows that may involve secrets, private files, and wallet or payment configuration.\n\nMitigation: Use a pinned, reviewed package version in an isolated project with only required files and environment variables exposed.\n\nRisk: Bankr x402 commands may perform real paid operations even when a maximum payment value is shown.\n\nMitigation: Treat Bankr x402 calls as real payments, use a separate payer wallet from the endpoint owner wallet, and verify intent before execution.\n\nRisk: Wormhole codes grant one-time access to encrypted payloads and can expose the payload if shared publicly.\n\nMitigation: Share codes only with intended recipients, avoid logging plaintext secrets or payloads, prefer short TTLs, and clean up received artifacts when no longer needed.\n\n## Reference(s):\n\n- [Agent Wormhole ClawHub page](https://clawhub.ai/builtbyecho/skills/agent-wormhole)\n- [Agent Wormhole holder/API route](https://storage.builtbyecho.xyz/agent-wormhole)\n- [Agent Wormhole health endpoint](https://storage.builtbyecho.xyz/agent-wormhole/health)\n- [Bankr x402 paid open endpoint](https://x402.bankr.bot/0x2a16625fad3b0d840ac02c7c59edea3781e340ae/agent-wormhole-open)\n\n## Skill Output:\n\n**Output Type(s):** [Text, Markdown, Shell commands, Configuration, Guidance]\n\n**Output Format:** [Markdown with inline bash commands and operational guidance]\n\n**Output Parameters:** [1D]\n\n**Other Properties Related to Output:** [May include CLI/API commands, endpoint checks, wallet/payment handling guidance, and safety reminders for encrypted one-time handoffs.]\n\n## Skill Version(s):\n\n0.1.2 (source: server release evidence)\n\n## Ethical Considerations:\n\nUsers should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment."},{"path":"agents/openai.yaml","content":"display_name: Agent Wormhole\nshort_description: One-time sealed handoffs for autonomous agents.\ndefault_prompt: Use Agent Wormhole to open a temporary encrypted passage for a mission brief, scoped secret, artifact, receipt, or config drop that can be claimed once."}],"languages":[],"docsSourceLabel":"CLAWHUB","editorialOverview":"Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts,... Skill: Agent Wormhole Owner: builtbyecho Summary: Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts,... Tags: latest:0.1.2 Version history: v0.1.2 | 2026-05-26T00:22:15.305Z | user Keep registry skill aligned with sanitized package metadata v0.1.1 | 2026-05-26T00:19:43.288Z | user Sync Agent Wormhole 0.1.1 skill","editorialQuality":{"score":100,"threshold":65,"status":"ready","wordCount":1102,"uniquenessScore":48,"reasons":[]}},"media":{"evidence":{"source":"no-media","verified":false,"confidence":"low","updatedAt":"2026-10-11T13:54:02.855Z","emptyReason":"No screenshots, media assets, or demo links are available."},"primaryImageUrl":null,"mediaAssetCount":0,"assets":[],"demoUrl":null},"ownerResources":{"evidence":{"source":"unclaimed","verified":false,"confidence":"low","updatedAt":"2026-10-11T13:54:02.855Z","emptyReason":"This page has not been claimed by the agent owner."},"hasCustomPage":false,"customPageUpdatedAt":null,"customLinks":[],"structuredLinks":{"docsUrl":null,"demoUrl":null,"supportUrl":null,"pricingUrl":null,"statusUrl":null},"customPage":null},"relatedAgents":{"evidence":{"source":"protocol-neighbors","verified":false,"confidence":"medium","updatedAt":"2026-10-11T16:00:24.910Z","emptyReason":null},"items":[{"id":"8ebccd8e-3863-4187-8355-c3f14e1f9edf","entityType":"agent","canonicalPath":"/agent/iofficeai-aionui","slug":"iofficeai-aionui","name":"AionUi","description":"Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!","url":"https://github.com/iOfficeAI/AionUi","homepage":"https://www.aionui.com","source":"GITHUB_REPOS","protocols":["MCP","OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-10-09T19:11:12.944Z","createdAt":"2026-02-25T03:38:16.584Z","downloads":null},{"id":"b917f68a-ebff-438e-84f8-3f4b2494c0bc","entityType":"agent","canonicalPath":"/agent/activepieces-activepieces","slug":"activepieces-activepieces","name":"activepieces","description":"AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents","url":"https://github.com/activepieces/activepieces","homepage":"https://www.activepieces.com","source":"GITHUB_REPOS","protocols":["OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-15T02:22:12.426Z","createdAt":"2026-02-25T03:38:12.412Z","downloads":null},{"id":"5cb26759-3a39-483f-94cf-276a98c13bb8","entityType":"agent","canonicalPath":"/agent/cherryhq-cherry-studio","slug":"cherryhq-cherry-studio","name":"cherry-studio","description":"AI productivity studio with smart chat, autonomous agents, and 300+ assistants. Unified access to frontier LLMs","url":"https://github.com/CherryHQ/cherry-studio","homepage":"https://cherry-ai.com","source":"GITHUB_REPOS","protocols":["MCP","OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-11T14:38:40.986Z","createdAt":"2026-02-25T03:38:19.379Z","downloads":null},{"id":"6f6582d0-5d76-4f0f-b81d-86520247950b","entityType":"agent","canonicalPath":"/agent/copilotkit-copilotkit","slug":"copilotkit-copilotkit","name":"CopilotKit","description":"The Frontend for Agents & Generative UI. React + Angular","url":"https://github.com/CopilotKit/CopilotKit","homepage":"https://docs.copilotkit.ai","source":"GITHUB_REPOS","protocols":["OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-03-25T09:50:57.846Z","createdAt":"2026-02-25T03:39:14.617Z","downloads":null}],"links":{"hub":"/agent","source":"/agent/source/clawhub","protocols":[{"label":"OpenClaw","href":"/agent/protocol/openclew"}]}}}