snipit.sh

Share code snippets and files securely via snipit.sh with AES-256 encryption. Use when sharing code, configs, logs, diffs, or secrets with password protection, burn-after-read, or auto-expiration. Supports CLI (snipit) or curl API fallback.

This skill appears to do what it says: it wraps the snipit.sh service via a CLI or curl. Before installing: 1) Check the npm package (snipit-sh) page, author, and recent downloads/versions to ensure you trust the publisher; 2) Prefer using the curl API fallback if you don't want to install a global npm package; 3) Be aware that npm packages may run install scripts — consider installing in a sandbox or without -g; 4) When sharing secrets, use a strong, unique password and verify the HTTPS endpoint (https://snipit.sh) to avoid MITM; 5) If you need higher assurance, inspect the npm package contents or source repo for suspicious scripts before installing. If you want, I can look up the npm package metadata and recent publish info for snipit-sh to help you decide.

Type: OpenClaw Skill Name: snipit Version: 1.0.0 The skill bundle is designed to facilitate secure sharing of code snippets and files via the `snipit.sh` service, as described in `SKILL.md`. It instructs the agent to install the `snipit-sh` npm package and provides usage examples for sharing various types of data, including potentially sensitive files like `.env`, with options for password protection and expiration. All actions are aligned with the stated purpose of the skill, and there is no evidence of unauthorized data exfiltration, malicious execution, persistence, or prompt injection attempting to subvert the agent's behavior for harmful intent. The network calls are exclusively to the intended `snipit.sh` service.