XMTP CLI

Run and script the XMTP CLI for testing, debugging, and interacting with XMTP conversations, groups, and messages. Use when the user needs init, send, list, groups, debug, sync, permissions, or content commands from the CLI.

This skill's documentation looks like legitimate XMTP CLI usage, but note two things before installing or using it: (1) the SKILL.md expects you to create a .env containing XMTP_WALLET_KEY (your Ethereum private key) and XMTP_DB_ENCRYPTION_KEY — extremely sensitive values. Never paste a real production private key into an untrusted package's config; prefer ephemeral wallets, hardware wallets, or a provider-based auth flow. (2) The skill metadata does not provide a source or homepage and does not declare the required env vars — verify you are installing the official @xmtp/cli from the npm registry (check the package owner, release page, and package contents) and confirm the package integrity (checksums/signatures) before installing. If you must use this skill, run it in an isolated environment (container/VM) and avoid storing long-term private keys in plaintext .env files. If possible, consult the official docs at https://docs.xmtp.org and install only from the official project pages.

Type: OpenClaw Skill Name: xmtp-cli Version: 1.0.0 The OpenClaw AgentSkills bundle for the XMTP CLI is benign. It provides instructions and commands for installing and interacting with the XMTP command-line interface, including managing conversations, groups, messages, and debugging. While the skill handles sensitive information like private keys (`XMTP_WALLET_KEY`) and database encryption keys (`XMTP_DB_ENCRYPTION_KEY`) in `setup/rules/env-variables.md` and `setup/rules/init.md`, these are explicitly for configuring the XMTP CLI itself, not for exfiltration or unauthorized access. There is no evidence of prompt injection, malicious execution, data exfiltration to external endpoints, persistence mechanisms, or obfuscation. All actions are clearly aligned with the stated purpose of managing the XMTP CLI.