← Back to Skills Marketplace
411
Downloads
0
Stars
1
Active Installs
5
Versions
Install in OpenClaw
/install perkoon-transfer
Description
The agent data layer. Perkoon moves files between agents and the physical world — agent to human, agent to agent, agent to pipeline. P2P over WebRTC. Free. E...
Usage Guidance
This skill appears coherent for P2P file transfers. Before installing: 1) Prefer a pinned package version (the README recommends pinned npx usage); ensure the platform installer uses a pinned, reviewed version rather than pulling 'latest' from npm. 2) Understand npx/npm-run will fetch and execute remote code—review the perkoon package contents and author on the registry if you need stronger assurance. 3) Be aware temporary logs (/tmp/perkoon-*.log) may include filenames or session metadata; clear or restrict access if that matters. 4) Only allow the agent to send files after explicit user confirmation (the instructions require this, but verify your agent enforces it). 5) Use the CLI's --password option for sensitive transfers and verify signaling behavior (perkoon.com links likely handle signaling; confirm whether any metadata is relayed to the server). If you need more assurance, ask the skill author for a reproducible, pinned release and a link to the package source (GitHub repo or release) to audit before installation.
Capability Analysis
Type: OpenClaw Skill
Name: perkoon-transfer
Version: 2.0.1
The skill provides a P2P file transfer capability via WebRTC, which is an inherently high-risk behavior as it facilitates data exfiltration from the agent's environment. While SKILL.md includes safety guardrails (e.g., Rule 10) and advises against sending sensitive files without approval, it also provides instructions to bypass the service's own safety confirmation modals via localStorage and promotes autonomous agent-to-agent transfers without human oversight. The reliance on executing remote code via npx and the potential for abuse of the transfer protocol (perkoon.com) make this skill high-risk.
Capability Assessment
Purpose & Capability
Name/description (P2P file transfer over WebRTC, agent-to-agent/human/pipeline) aligns with required binary (node) and the declared node package install (perkoon). No unrelated credentials, config paths, or unexpected binaries are requested.
Instruction Scope
SKILL.md instructs the agent to run CLI commands that create /tmp logs, start background processes, and share perkoon.com URLs—all within the stated file-transfer scope. It explicitly tells the agent to confirm file paths with the user and avoid sensitive directories, which is good. Note: the logs written to /tmp may contain JSON with filenames/session info, so those artifacts could expose metadata if not cleaned.
Install Mechanism
Install spec uses a Node/npm package (perkoon) which is appropriate for a Node-based CLI. This is a moderate-risk install type (npm packages execute code). The SKILL.md recommends using pinned npx invocations (e.g. [email protected] / @perkoon/[email protected]) to avoid dynamic fetching; the registry install metadata does not show a pinned version—this mismatch should be addressed (pin or review package before install). No downloads from arbitrary URLs or extract-from-unknown-host operations are present.
Credentials
No environment variables, secrets, or unrelated service credentials are requested. Node is the only required binary. This is proportionate to the described functionality.
Persistence & Privilege
The skill is not always-on and does not request system-wide config changes or credentials. Autonomous invocation is allowed (platform default) but not combined with other red flags here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install perkoon-transfer - After installation, invoke the skill by name or use
/perkoon-transfer - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.1
Pin [email protected] and @perkoon/[email protected] — no dynamic @latest fetches. Add user confirmation before sending. Block sensitive directories.
v2.0.0
Major update: Add MCP server as recommended integration method, A2A protocol endpoint with JSON-RPC 2.0, browser automation with Playwright scripts, --session/--sender-key flags for agent-to-agent transfers, discovery endpoints. All commands now use npx for version safety. Repositioned as The Agent Data Layer.
v1.0.2
- Updated `metadata` block to use YAML formatting and corrected the `install.kind` from `npm` to `node`.
- No changes to functionality or user-facing documentation.
v1.0.1
- Clarified that for sensitive files, the `--password` flag should always be used, as anyone with the share link can download without it.
- Added a note to the "P2P transfers are free, unlimited, and encrypted" paragraph emphasizing password protection for sensitive files.
v1.0.0
Initial release of perkoon-transfer.
- Enables autonomous, encrypted file transfers between agents or from agent to human via shareable browser link.
- No configuration required; supports unlimited P2P transfers with real-time progress and robust error reporting.
- Human recipients need only a browser—no installation needed.
- Provides structured CLI workflows for both sending and receiving, with JSON event output for automation.
- Password protection available for added security.
- Includes detailed usage instructions, flags, event streams, exit codes, and strict operational rules.
Metadata
Frequently Asked Questions
What is Perkoon Transfer?
The agent data layer. Perkoon moves files between agents and the physical world — agent to human, agent to agent, agent to pipeline. P2P over WebRTC. Free. E... It is an AI Agent Skill for Claude Code / OpenClaw, with 411 downloads so far.
How do I install Perkoon Transfer?
Run "/install perkoon-transfer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Perkoon Transfer free?
Yes, Perkoon Transfer is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Perkoon Transfer support?
Perkoon Transfer is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Perkoon Transfer?
It is built and maintained by Perkoon (@alex-vy); the current version is v2.0.1.
More Skills