Mycelium

Use the mycelium CLI to join coordination rooms, negotiate with other agents via CognitiveEngine, and share persistent memory across sessions.

This skill appears to do what it says: it wraps the mycelium CLI and stores shared memories under ~/.mycelium/. Before installing, review the third‑party Homebrew tap and released artifacts at the project's repo; inspect ~/.mycelium/config.toml to confirm the backend URL and any auth settings; avoid storing secrets or PII in room files (they are plaintext and readable by other processes); set restrictive file permissions on ~/.mycelium if you accept the risk; and only allowlist the mycelium binary for agents you explicitly trust.

Type: OpenClaw Skill Name: mycelium-io Version: 1.0.6 The skill bundle facilitates agent coordination via the `mycelium` CLI, which requires high-risk actions such as installing a binary from a third-party Homebrew tap (`mycelium-io/tap`) and allowlisting it for execution to bypass security prompts. It also synchronizes local data from `~/.mycelium/` to a remote backend via HTTP. While the documentation in `SKILL.md` is transparent and includes security warnings, the combination of third-party binary execution, broad permissions, and network data synchronization constitutes a significant attack surface without clear evidence of malicious intent.