X2c Publish

X2C Distribution and Wallet API — publish video to X2C platform, manage assets (balance, claim X2C, swap to USDC, withdraw, transactions).

Before installing or supplying credentials: 1) Verify the publisher/source — there is no homepage or known owner info. 2) Treat X2C_API_KEY as a sensitive credential — use a least-privilege key (if the API supports scoping) and rotate it after testing. 3) The SKILL.md references X2C_API_BASE_URL and USER_ID and instructs reading/writing credentials/{USER_ID}.json and ~/.openclaw/openclaw.json even though only X2C_API_KEY is declared; expect the agent to access that file path and the configured env var. If you don’t want credentials written to disk, don’t enable per-user file storage. 4) Limit wallet risk: test with an account/key that has no withdraw/transfer privileges until you trust the skill. 5) Consider running this skill in an isolated environment or sandbox and confirm the API endpoints and base URL (set X2C_API_BASE_URL explicitly) to avoid surprises. 6) If you need higher assurance, request provenance (official X2C homepage or source repo) and an explicit manifest listing all env vars and file paths the skill will access.

Type: OpenClaw Skill Name: x2c-publish Version: 0.1.0 The skill bundle provides a standard interface for interacting with the X2C platform's video distribution and wallet APIs. It uses curl commands to perform legitimate actions such as uploading content to S3, publishing projects, and managing digital assets (USDC/X2C). While the wallet functionality (withdrawals/swaps) is high-risk by nature, the instructions are transparent, follow a logical workflow, and contain no evidence of malicious intent, obfuscation, or unauthorized data exfiltration.