paprini/clawbridge
/SKILL.md
# ClawBridge Skill Use this repository when an OpenClaw agent needs to communicate with peer agents on other machines through ClawBridge. ## When To Use It Use ClawBridge when you need to: - ping a peer or inspect its status - send a chat message through another instance's local gateway - broadcast a message to multiple peers - expose a tightly controlled subset of OpenClaw gateway tools over A2A ## Core Skills - `ping` - `get_status` - `chat` - `broadcast` The `chat` skill expects a JSON
$ install --global
skillsauthnpx skillsauth add paprini/clawbridge clawbridgeInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 11, 2026, 2:44 AM11.9s110 files scanned
SKILL.md
ClawBridge Skill
Use this repository when an OpenClaw agent needs to communicate with peer agents on other machines through ClawBridge.
When To Use It
Use ClawBridge when you need to:
- ping a peer or inspect its status
- send a chat message through another instance's local gateway
- broadcast a message to multiple peers
- expose a tightly controlled subset of OpenClaw gateway tools over A2A
Core Skills
pingget_statuschatbroadcast
The chat skill expects a JSON payload such as:
{ "target": "#general", "message": "hello" }
The A2A message may send the skill name and JSON args in separate text parts. ClawBridge supports that format.
Safe Usage Rules
- Prefer built-in skills before exposing gateway tools.
- Keep
config/bridge.jsonlimited to safe tools likemessage,web_search,web_fetch,memory_search, andsession_status. - Do not expose
exec,Write,Edit,Read, orbrowserunless the operator explicitly accepts the risk. - Run
npm run verifybefore starting the server.
Operator Workflow
npm install
npm run setup
npm run verify
npm start
Key Files
src/server.js: A2A server entry pointsrc/executor.js: skill routing and argument extractionsrc/bridge.js: OpenClaw gateway bridgeconfig/bridge.json: gateway tool exposure policydocs/PUBLIC_QUICKSTART.md: public deployment guide
Related Skills
openclaw/taskflow
tools
VerifiedTrustedCommunity
Use when work should span one or more detached tasks but still behave like one job with a single owner context. TaskFlow is the durable flow substrate under authoring layers like Lobster, ACPX, plugins, or plain code. Keep conditional logic in the caller; use TaskFlow for flow identity, child-task linkage, waiting state, revision-checked mutations, and user-facing emergence.
357,764SKILL.mdUpdated Apr 10, 2026
openclaw/extensions/lobster
tools
VerifiedTrustedCommunity
# Lobster Lobster executes multi-step workflows with approval checkpoints. Use it when: - User wants a repeatable automation (triage, monitor, sync) - Actions need human approval before executing (send, post, delete) - Multiple tool calls should run as one deterministic operation ## When to use Lobster | User intent | Use Lobster? | | ------------------------------------------------------ | --------------------------
357,764SKILL.mdUpdated Apr 10, 2026
steipete/extensions/lobster
tools
VerifiedTrustedCommunity
# Lobster Lobster executes multi-step workflows with approval checkpoints. Use it when: - User wants a repeatable automation (triage, monitor, sync) - Actions need human approval before executing (send, post, delete) - Multiple tool calls should run as one deterministic operation ## When to use Lobster | User intent | Use Lobster? | | ------------------------------------------------------ | --------------------------
357,588SKILL.mdUpdated Apr 13, 2026
steipete/xurl
tools
VerifiedTrustedCommunity
A CLI tool for making authenticated requests to the X (Twitter) API. Use this skill when you need to post tweets, reply, quote, search, read posts, manage followers, send DMs, upload media, or interact with any X API v2 endpoint.
356,423SKILL.mdUpdated Apr 13, 2026