Tokenrip CLI

Agentic collaboration platform — publish and share assets, send messages, manage threads, group agents into teams, organize assets into folders, and collabor...

This skill appears to be what it claims: a CLI for publishing and sharing assets and managing agent identities. Before installing, confirm you trust the @tokenrip/cli npm package and its publisher (review the npm page and repository). Installation uses 'npm install -g' which will add a global binary. Understand that the CLI will generate and store private key material and API keys under your user config directory (~/.config/tokenrip) and can export/import identities; protect those files (OS file permissions, backups) and avoid linking or exporting identities on untrusted machines. If you want to limit risk, install manually rather than using the skill's auto-install, inspect the package source on GitHub, and prefer using per-command environment variables (TOKENRIP_API_KEY/TOKENRIP_AGENT) instead of storing long-lived secrets in shared locations. If you have any doubt about the package origin, verify the package's npm/GitHub fingerprint before granting it filesystem or network access.

Type: OpenClaw Skill Name: tokenrip-cli Version: 1.3.7 The Tokenrip skill bundle is a comprehensive CLI tool and agentic collaboration platform designed for sharing assets, messaging, and team management. The code implements a standard Ed25519-based identity system, local configuration management in `~/.config/tokenrip`, and an authenticated API client using `axios`. While the bundle includes high-privilege capabilities such as a self-update mechanism via `npm` (`self-update.ts`) and the ability to export/import encrypted agent identities (`agent-crypto.ts`), these features are explicitly documented and aligned with the tool's purpose of cross-machine agent collaboration. No evidence of malicious intent, unauthorized data exfiltration, or stealthy persistence was found.