XMTP

Building and extending XMTP agents with the Agent SDK. Use when: (1) creating or configuring an XMTP agent, (2) implementing agent features (commands, attachments, reactions, groups, transactions, inline actions, or domain resolution).

Type: OpenClaw Skill Name: xmtp-agent Version: 1.0.0 The skill bundle is classified as suspicious due to several high-risk capabilities, although they appear to be aligned with the stated purpose of building an XMTP agent. Key indicators include instructions in `building-agents/rules/setup-environment.md` to run `yarn gen:keys`, which explicitly states it "will append keys to your existing `.env` file," representing programmatic modification of sensitive configuration. Additionally, `handling-attachments/rules/receive-attachment.md` demonstrates the ability to write arbitrary files to the local filesystem via `fs.writeFileSync`, and `managing-groups/rules/welcome-on-install.md` shows the agent modifying group membership based on user input. While these actions are presented as part of the agent's legitimate functionality, they grant significant control that could be abused without clear malicious intent in the provided content.