← Back to Skills Marketplace
koellins

are.na claw

by philkoell · GitHub ↗ · v2.2.0
cross-platform ⚠ suspicious
603
Downloads
0
Stars
0
Active Installs
6
Versions
Install in OpenClaw
/install arena-claw
Description
Simple CLI wrapper for the are.na API. Lists channels, adds blocks, watches feeds. No AI, no automation, no external integrations. Just API calls.
README (SKILL.md)

are.na-claw

Simple, transparent CLI for are.na API. No AI. No automation. No hidden features.

What This Does

  • Makes API calls to are.na
  • Lists channels and blocks
  • Adds images/links to channels
  • Watches channels for changes
  • Switches between multiple accounts

What This Does NOT Do

  • ✗ AI-powered curation
  • ✗ Automatic content discovery
  • ✗ Cross-platform sync
  • ✗ External integrations
  • ✗ Image analysis or color extraction
  • ✗ Scheduled automation

Installation

# Clone the repository
git clone https://github.com/yourusername/arena-claw ~/arena-claw

# Or copy just the arena script
cp arena-claw/arena ~/bin/arena
chmod +x ~/bin/arena

# Add to PATH (add to ~/.zshrc or ~/.bashrc)
export PATH="$HOME/bin:$PATH"

Source Code

The CLI is a single Python script: arena

It uses only:

  • curl for API calls
  • python3 for parsing
  • Local files for token storage

No dependencies, no external imports.

Authentication

Your API token stays on your machine.

Tokens are stored locally:

  • Single account: ~/.arena_token
  • Multi-account: ~/.openclaw/.arena_tokens

The skill never sends your tokens anywhere except to are.na API.

# Add your account
arena auth YOUR_API_TOKEN

# Or add named account
arena auth YOUR_API_TOKEN myaccount

# Switch accounts
arena switch myaccount

# List accounts
arena accounts

Usage

# Check your account
arena me

# List your channels
arena channels

# Get channel contents
arena channel channel-name

# Add image to channel
arena add image https://example.com/image.jpg --channel my-channel

# Add link to channel  
arena add link https://example.com --channel my-channel --title "Example"

# Watch for new items
arena watch channel-name --interval 60

# Search channels
arena search glitch

# Create channel
arena create "my-channel"

Multi-Account

# Add multiple accounts
arena auth TOKEN1 account1
arena auth TOKEN2 account2

# Use specific account
arena -a account1 me
arena -a account2 channel shared-channel

# Switch default account
arena switch account1

Commands

Command Description
arena auth \x3Ctoken> [name] Add API token
arena accounts List configured accounts
arena switch \x3Cname> Switch default account
arena me Show current user
arena channels [user] List channels
arena channel \x3Cslug> Get channel contents
arena add \x3Ctype> \x3Curl> --channel \x3Cname> Add block to channel
arena watch \x3Cslug> Watch for changes
arena search \x3Cquery> Search channels
arena create \x3Ctitle> Create new channel
arena trending Search trending
arena explore \x3Ckeywords> Search by keywords
arena analyze \x3Cslug> Count block types
arena doctor Debug connection

Security

  • No credential harvesting - Tokens stored only in your home directory
  • No external calls - Only talks to api.are.na
  • No data exfiltration - All data stays local
  • No automatic execution - Every command is explicit
  • No dependencies - Only curl and shell built-ins

Uninstall

rm -rf ~/arena-claw
rm ~/.arena_token ~/.openclaw/.arena_tokens

No Warranty

This is a simple wrapper. Use at your own risk. Always verify what commands do before running them.

Usage Guidance
Do not run install.sh or any installer until you verify the actual CLI script and its source. Things to do before installing: (1) Confirm the real upstream repository and check that the `arena` Python script is present and readable in that repo; (2) Inspect the script to ensure it only talks to api.are.na and does not transmit tokens elsewhere; (3) Verify where it writes tokens (it claims ~/.arena_token and ~/.openclaw/.arena_tokens) and decide if that storage location and format are acceptable; (4) If a GitHub URL is provided, prefer installing directly from a trusted release or review the file contents locally before making them executable; (5) If anything in the package or its instructions is vague or missing (e.g., the missing `arena` file), treat it as incomplete and avoid running it. Because of the missing main script and contradictory instructions about file writes/config paths, treat this skill as suspicious until its source and contents are verified.
Capability Analysis
Type: OpenClaw Skill Name: arena-claw Version: 2.2.0 The skill bundle appears benign. The `SKILL.md` and `README.md` explicitly state the skill's purpose as a simple CLI wrapper for the are.na API, emphasizing 'No AI, no automation, no external integrations,' and 'No data exfiltration.' The `allowed-tools` in `SKILL.md` restrict Bash execution to `arena:*` with 'No file writes, no exec beyond curl,' which is a strong security control. The `install.sh` script is straightforward, only copying the `arena` script locally and making it executable, with no suspicious network calls or complex logic. There is no evidence of prompt injection, obfuscation, or malicious intent in any of the provided files.
Capability Assessment
Purpose & Capability
The declared purpose (CLI wrapper for are.na) matches required binaries (curl, python3). However, the SKILL.md repeatedly refers to a Python script named `arena` as the single-file CLI, but that script is not present in the file manifest — only install.sh, README.md, and SKILL.md are included. A CLI that relies on a missing executable is incoherent: either the package is incomplete or it expects you to fetch code from an external repository (the README's GitHub URL is placeholder-like).
Instruction Scope
SKILL.md instructs storing API tokens in local files (~/.arena_token, ~/.openclaw/.arena_tokens) and running commands that will write/read those files, yet the skill metadata lists no required config paths. The SKILL.md also claims 'No file writes' in the allowed-tools header while describing token storage and auth commands — this is a direct contradiction about whether local file writes occur.
Install Mechanism
There is no platform install spec; the included install.sh simply copies a local `arena` file into ~/bin. That is low-risk in itself, but since the `arena` file is not included in the manifest, the script as provided will fail or mislead the user unless the missing file is fetched from elsewhere. The README points at a GitHub URL that looks like a placeholder, so confirm the real source before running install.sh.
Credentials
The skill declares no required environment variables (reasonable for a CLI that uses user-provided tokens), but it does implicitly require write/read access to token files in the user's home directory (~/.arena_token and ~/.openclaw/.arena_tokens). Those config paths were not declared in the registry metadata. The absence of declared config paths combined with instructions to store tokens in home directories is an inconsistency users should note.
Persistence & Privilege
The skill does not request always:true and does not declare elevated privileges. Its expected persistence is limited to storing user tokens in home-directory files under the user's control, which is typical for a CLI. Still, because the actual CLI binary/script is missing from the bundle, it's unclear what code would perform those writes.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install arena-claw
  3. After installation, invoke the skill by name or use /arena-claw
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.2.0
Security fix: Clear install instructions, single Python script, no contradictory auth. CLI code included with install.sh, consistent instructions across SKILL.md and README.md
v2.1.0
Code refactored: proper argparse with subcommands, type hints, classes for TokenStore and ArenaAPI, better error handling, cleaner structure
v2.0.0
Security fix: Removed overstated AI/automation claims. Made transparent: only does API calls. No hidden features, no external integrations, no credential issues. Simpler, safer, honest.
v1.2.0
Made skill generic - no specific account names, users define their own
v1.1.0
Multi-account support, switch between accounts, -a flag for specific account
v1.0.0
Initial release of are.na-claw: a comprehensive CLI tool for are.na with deep integration and AI-powered features. - Manage channels and blocks, including creation, search, and detailed info retrieval. - Batch operations for import, export, deduplication, and cloning of channels. - Advanced AI curation and discovery: mood board creation, content recommendations, and aesthetic analysis. - Automation and scheduling support with continuous monitoring, digests, and cron integration. - Creative tools for generating zines, playlists, essays, and AI block descriptions. - Collaborative features including sharing, invitations, and team management. - Integrations with Notion, Obsidian, Pinterest, and RSS sources. - Includes troubleshooting and rate limit management commands.
Metadata
Slug arena-claw
Version 2.2.0
License
All-time Installs 0
Active Installs 0
Total Versions 6
Frequently Asked Questions

What is are.na claw?

Simple CLI wrapper for the are.na API. Lists channels, adds blocks, watches feeds. No AI, no automation, no external integrations. Just API calls. It is an AI Agent Skill for Claude Code / OpenClaw, with 603 downloads so far.

How do I install are.na claw?

Run "/install arena-claw" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is are.na claw free?

Yes, are.na claw is completely free (open-source). You can download, install and use it at no cost.

Which platforms does are.na claw support?

are.na claw is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created are.na claw?

It is built and maintained by philkoell (@koellins); the current version is v2.2.0.

💬 Comments