protocol bridge

Enables seamless cross-protocol AI agent communication by translating messages, intelligent routing, agent discovery, and secure authentication.

Do not install or run the referenced npm package unless you verify its source and code. Steps to take before using this skill: - Check the npm package page and GitHub repository links in the SKILL.md; confirm the maintainer identity and inspect the source code for unexpected behavior. - Confirm you have Node/npm and that the package version is legitimate — the registry metadata should have declared required binaries (it does not). - Because the bridge handles authentication (JWT/OAuth/mTLS), ask the maintainer which credentials/certificates are needed and how they are stored. Avoid supplying long-lived secrets until you understand storage/rotation. - If you must test it, run the npm package in an isolated environment (VM/container) and restrict network access until you audit it. - Prefer skills whose registry metadata accurately lists required binaries and environment variables and that include a verifiable source/homepage. The mismatch here is the main reason for caution.

Type: OpenClaw Skill Name: protocol-bridge Version: 1.0.0 The skill bundle contains no functional code and acts solely as a documentation wrapper in skill.md and readme.md, directing the AI agent to perform a global installation of an external npm package (npm install -g openclaw-protocol-bridge). This is a high-risk behavior as it facilitates the execution of unverified external code with elevated privileges. Additionally, the _meta.json file contains an anomalous future-dated timestamp (March 2026), which is a common indicator of synthetic or improperly generated metadata.