[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6H25EY0K2FPYWH18JBQHAP0":3,"skill-same:01M6H25EY0K2FPYWH18JBQHAP0":94},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":46,"linkOnly":47,"markdownContent":48,"markdownBody":49,"frontMatter":50,"refName":57,"commitSha":58,"skillDirectory":59,"forksCount":60,"repositoryHtmlUrl":61,"repositoryHomepageUrl":6,"ownerHtmlUrl":62,"ownerBlogUrl":63,"ownerDescription":64,"updatedAt":65,"install":66,"resources":79},"01M6H25EY0K2FPYWH18JBQHAP0","agent-wormhole",null,"Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts, config drops, CLI\u002FAPI usage, ECHO holder access, and Bankr x402 paid opens.","jiayaoqijia\u002Fcryptoskill","jiayaoqijia","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F1453879?v=4","01M6GMYTX7Q7S504VC6E756ENR","YQ","01M6GMYV1QKJ1CC75MTTGT9PR0",81,"AGPL-3.0","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Ftrading\u002Fbankrbot-official-agent-wormhole\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45],"wormhole","agent wormhole","base","paid","scoped","mission","for","usage","encrypted","time","bankr","cli","x402","Echo","use","autonomous","access","secrets","api","artifacts","autonomous agents","config","2026-11-10 10:12:30",false,"---\nname: agent-wormhole\ndescription: Use Agent Wormhole for one-time sealed handoffs between autonomous agents, including encrypted mission briefs, scoped secrets, temporary artifacts, receipts, config drops, CLI\u002FAPI usage, ECHO holder access, and Bankr x402 paid opens.\nemoji: ?️\ntags: [agents, handoff, encrypted, x402, base, echo]\nvisibility: public\n---\n\n# Agent Wormhole\n\nAgent Wormhole opens a temporary encrypted passage for agent handoffs. The payload can be claimed once, then the channel collapses.\n\n## Before First Use\n\nThis skill executes the `@builtbyecho\u002Fagent-wormhole` npm package. Before running any `agent-wormhole` or `npx @builtbyecho\u002Fagent-wormhole` command for the first time in a session, tell the user:\n\n> About to install\u002Frun `@builtbyecho\u002Fagent-wormhole` (v0.1.2) from npm. It is an encrypted one-time-handoff CLI that writes payloads to a local `.agent-wormholes\u002F` directory and (for holder\u002Fpaid opens) calls `storage.builtbyecho.xyz` and the Bankr x402 endpoint. It does NOT sign transactions or access private keys.\n>\n> Proceed? (y\u002Fn)\n\nWait for explicit confirmation before the first invocation. Subsequent calls in the same session do not need to re-prompt.\n\nPin the version when invoking via `npx`:\n\n```bash\nnpx -p @builtbyecho\u002Fagent-wormhole@0.1.2 agent-wormhole \u003Cargs>\n```\n\n## Links\n\n- Website: `https:\u002F\u002Fwww.builtbyecho.xyz`\n- Product page: `https:\u002F\u002Fwww.builtbyecho.xyz\u002Fagent-wormhole.html`\n- Source: `https:\u002F\u002Fgithub.com\u002FBuiltByEcho\u002Fagent-wormhole`\n- Package: `https:\u002F\u002Fwww.npmjs.com\u002Fpackage\u002F@builtbyecho\u002Fagent-wormhole`\n- Hosted skill file: `https:\u002F\u002Fwww.builtbyecho.xyz\u002Fskills\u002Fagent-wormhole\u002FSKILL.md`\n\nUse this skill when a task involves:\n\n- sending or receiving one-time agent handoffs\n- passing mission briefs, configs, receipts, files, or scoped secrets\n- using the `agent-wormhole` CLI or HTTP API\n- checking ECHO holder sponsored access\n- checking Bankr x402 paid open status\n- deploying or operating the VPS service\n\n## Quick Commands\n\nFrom a project that has the package installed:\n\n```bash\nagent-wormhole send --text \"mission brief\" --ttl 10m\nagent-wormhole send --file .\u002Fartifact.tgz --note \"handoff bundle\"\nagent-wormhole inspect \u003Ccode>\nagent-wormhole receive \u003Ccode> --out .\u002Freceived\nagent-wormhole cleanup --delete-claimed-older-than 15m\n```\n\nFor one-off use without installing globally:\n\n```bash\nnpx -p @builtbyecho\u002Fagent-wormhole@0.1.2 agent-wormhole send --text \"mission brief\"\n```\n\n## Mental Model\n\n- Codes are `id.secret`.\n- `id` locates stored metadata.\n- `secret` derives the AES-256-GCM decrypt key and is not stored.\n- Default TTL is 10 minutes.\n- Max TTL is 24 hours unless explicitly configured lower.\n- Default max payload is 5 MB.\n- Receipts are written for opens and claims.\n\n## Access Paths\n\n- Local CLI\u002Flibrary opens record `access.path = local`.\n- Direct API holder opens require an EIP-191 signature from a wallet holding at least `50,000,000 ECHO` on Base and record `access.path = echo_holder`.\n- Bankr x402 paid opens are handled by `agent-wormhole-open` and record `access.path = x402_paid`.\n- Claiming is free.\n\n## Live Endpoints\n\n- Direct holder\u002FAPI route: `https:\u002F\u002Fstorage.builtbyecho.xyz\u002Fagent-wormhole`\n- Bankr x402 paid open: `https:\u002F\u002Fx402.bankr.bot\u002F0x2a16625fad3b0d840ac02c7c59edea3781e340ae\u002Fagent-wormhole-open`\n- Self-hosted local service default: `http:\u002F\u002F127.0.0.1:8791`\n\n## Verification\n\nFrom the package root:\n\n```bash\nnpm test\nnode --check src\u002Fcli.js\nnode --check src\u002Findex.js\nnode --check src\u002Fserver.js\nnpm pack --json --dry-run\n```\n\nFor live health:\n\n```bash\ncurl -sS https:\u002F\u002Fstorage.builtbyecho.xyz\u002Fagent-wormhole\u002Fhealth\n```\n\nFor Bankr status, check both registry and execution:\n\n```bash\nbankr --config \"$BANKR_OWNER_CONFIG\" x402 list\nbankr x402 schema https:\u002F\u002Fx402.bankr.bot\u002F0x2a16625fad3b0d840ac02c7c59edea3781e340ae\u002Fagent-wormhole-open\nbankr --config \"$BANKR_PAYER_CONFIG\" x402 call -X POST -d '{\"payload\":\"dGVzdA==\"}' --max-payment 0.01 -y --raw https:\u002F\u002Fx402.bankr.bot\u002F0x2a16625fad3b0d840ac02c7c59edea3781e340ae\u002Fagent-wormhole-open\n```\n\nSet `BANKR_OWNER_CONFIG` to the endpoint owner\u002Foperator config and `BANKR_PAYER_CONFIG` to a separate payer config. Do not treat registry active status alone as proof that paid x402 execution works. A real paid call from a non-owner wallet is the proof.\n\n## Safety\n\n- Do not paste wormhole codes into public channels unless the user explicitly wants the payload claimable by anyone there.\n- Do not log plaintext secrets or payloads.\n- Prefer short TTLs for secrets.\n- Use local cleanup commands for received artifacts when they are no longer needed.\n- Do not test Bankr paid endpoints with the same wallet that owns\u002Fdeployed the endpoint.\n","# Agent Wormhole\n\nAgent Wormhole opens a temporary encrypted passage for agent handoffs. The payload can be claimed once, then the channel collapses.\n\n## Before First Use\n\nThis skill executes the `@builtbyecho\u002Fagent-wormhole` npm package. Before running any `agent-wormhole` or `npx @builtbyecho\u002Fagent-wormhole` command for the first time in a session, tell the user:\n\n> About to install\u002Frun `@builtbyecho\u002Fagent-wormhole` (v0.1.2) from npm. It is an encrypted one-time-handoff CLI that writes payloads to a local `.agent-wormholes\u002F` directory and (for holder\u002Fpaid opens) calls `storage.builtbyecho.xyz` and the Bankr x402 endpoint. It does NOT sign transactions or access private keys.\n>\n> Proceed? (y\u002Fn)\n\nWait for explicit confirmation before the first invocation. Subsequent calls in the same session do not need to re-prompt.\n\nPin the version when invoking via `npx`:\n\n```bash\nnpx -p @builtbyecho\u002Fagent-wormhole@0.1.2 agent-wormhole \u003Cargs>\n```\n\n## Links\n\n- Website: `https:\u002F\u002Fwww.builtbyecho.xyz`\n- Product page: `https:\u002F\u002Fwww.builtbyecho.xyz\u002Fagent-wormhole.html`\n- Source: `https:\u002F\u002Fgithub.com\u002FBuiltByEcho\u002Fagent-wormhole`\n- Package: `https:\u002F\u002Fwww.npmjs.com\u002Fpackage\u002F@builtbyecho\u002Fagent-wormhole`\n- Hosted skill file: `https:\u002F\u002Fwww.builtbyecho.xyz\u002Fskills\u002Fagent-wormhole\u002FSKILL.md`\n\nUse this skill when a task involves:\n\n- sending or receiving one-time agent handoffs\n- passing mission briefs, configs, receipts, files, or scoped secrets\n- using the `agent-wormhole` CLI or HTTP API\n- checking ECHO holder sponsored access\n- checking Bankr x402 paid open status\n- deploying or operating the VPS service\n\n## Quick Commands\n\nFrom a project that has the package installed:\n\n```bash\nagent-wormhole send --text \"mission brief\" --ttl 10m\nagent-wormhole send --file .\u002Fartifact.tgz --note \"handoff bundle\"\nagent-wormhole inspect \u003Ccode>\nagent-wormhole receive \u003Ccode> --out .\u002Freceived\nagent-wormhole cleanup --delete-claimed-older-than 15m\n```\n\nFor one-off use without installing globally:\n\n```bash\nnpx -p @builtbyecho\u002Fagent-wormhole@0.1.2 agent-wormhole send --text \"mission brief\"\n```\n\n## Mental Model\n\n- Codes are `id.secret`.\n- `id` locates stored metadata.\n- `secret` derives the AES-256-GCM decrypt key and is not stored.\n- Default TTL is 10 minutes.\n- Max TTL is 24 hours unless explicitly configured lower.\n- Default max payload is 5 MB.\n- Receipts are written for opens and claims.\n\n## Access Paths\n\n- Local CLI\u002Flibrary opens record `access.path = local`.\n- Direct API holder opens require an EIP-191 signature from a wallet holding at least `50,000,000 ECHO` on Base and record `access.path = echo_holder`.\n- Bankr x402 paid opens are handled by `agent-wormhole-open` and record `access.path = x402_paid`.\n- Claiming is free.\n\n## Live Endpoints\n\n- Direct holder\u002FAPI route: `https:\u002F\u002Fstorage.builtbyecho.xyz\u002Fagent-wormhole`\n- Bankr x402 paid open: `https:\u002F\u002Fx402.bankr.bot\u002F0x2a16625fad3b0d840ac02c7c59edea3781e340ae\u002Fagent-wormhole-open`\n- Self-hosted local service default: `http:\u002F\u002F127.0.0.1:8791`\n\n## Verification\n\nFrom the package root:\n\n```bash\nnpm test\nnode --check src\u002Fcli.js\nnode --check src\u002Findex.js\nnode --check src\u002Fserver.js\nnpm pack --json --dry-run\n```\n\nFor live health:\n\n```bash\ncurl -sS https:\u002F\u002Fstorage.builtbyecho.xyz\u002Fagent-wormhole\u002Fhealth\n```\n\nFor Bankr status, check both registry and execution:\n\n```bash\nbankr --config \"$BANKR_OWNER_CONFIG\" x402 list\nbankr x402 schema https:\u002F\u002Fx402.bankr.bot\u002F0x2a16625fad3b0d840ac02c7c59edea3781e340ae\u002Fagent-wormhole-open\nbankr --config \"$BANKR_PAYER_CONFIG\" x402 call -X POST -d '{\"payload\":\"dGVzdA==\"}' --max-payment 0.01 -y --raw https:\u002F\u002Fx402.bankr.bot\u002F0x2a16625fad3b0d840ac02c7c59edea3781e340ae\u002Fagent-wormhole-open\n```\n\nSet `BANKR_OWNER_CONFIG` to the endpoint owner\u002Foperator config and `BANKR_PAYER_CONFIG` to a separate payer config. Do not treat registry active status alone as proof that paid x402 execution works. A real paid call from a non-owner wallet is the proof.\n\n## Safety\n\n- Do not paste wormhole codes into public channels unless the user explicitly wants the payload claimable by anyone there.\n- Do not log plaintext secrets or payloads.\n- Prefer short TTLs for secrets.\n- Use local cleanup commands for received artifacts when they are no longer needed.\n- Do not test Bankr paid endpoints with the same wallet that owns\u002Fdeployed the endpoint.\n",{"name":5,"tags":51,"emoji":55,"visibility":56,"description":7},[52,53,32,36,26,54],"agents","handoff","echo","?️","public","main","3df1d0d67b30ff15236561f8c0f9f06d33f42dfd","skills\u002Ftrading\u002Fbankrbot-official-agent-wormhole",17,"https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia","https:\u002F\u002Feth2030.com","Hardcore infra. Building @alt-research and applied cryptography.","2026-11-12 02:28:42",{"source":8,"skillName":5,"commands":67,"prompt":77,"zipAvailable":78},[68,71,74],{"tool":69,"command":70},"npx","npx skills add jiayaoqijia\u002Fcryptoskill --skill agent-wormhole",{"tool":72,"command":73},"bunx","bunx skills add jiayaoqijia\u002Fcryptoskill --skill agent-wormhole",{"tool":75,"command":76},"pnpm","pnpm dlx skills add jiayaoqijia\u002Fcryptoskill --skill agent-wormhole","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Ftrading\u002Fbankrbot-official-agent-wormhole\u002FSKILL.md",true,[80,86,90],{"path":81,"resourceType":82,"resourceTypeDesc":83,"sizeBytes":84,"sourceHtmlUrl":85},"catalog.json","REFERENCE","参考文档",1644,"https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Ftrading\u002Fbankrbot-official-agent-wormhole\u002Fcatalog.json",{"path":87,"resourceType":82,"resourceTypeDesc":83,"sizeBytes":88,"sourceHtmlUrl":89},"SOURCE.md",324,"https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Ftrading\u002Fbankrbot-official-agent-wormhole\u002FSOURCE.md",{"path":91,"resourceType":82,"resourceTypeDesc":83,"sizeBytes":92,"sourceHtmlUrl":93},"TRUST.auto.yaml",2114,"https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Ftrading\u002Fbankrbot-official-agent-wormhole\u002FTRUST.auto.yaml",[95,124,144,162,175,185],{"skillNo":96,"name":97,"nameZh":6,"description":98,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":99,"licenseFileUrl":100,"sourceHtmlUrl":101,"categories":102,"keywords":103,"publishedAt":46},"01M712C436EQYE43342Q4E7GG1","recipe-performance","Diagnose a specific MetaMask user flow's real-app performance and Sentry critical-user-flow telemetry with deterministic mm-harness recipes. Use for CUF boundaries, cold\u002Fwarm\u002Fbackground-resume behavior, latency regressions, lifecycle tags, duplicate or blocking network requests, long tasks, layout\u002Fpaint cost, screen redraws, React rerenders, or browser trace analysis where tests alone cannot prove the real app.","MIT","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fwallets\u002Fmetamask-official-recipe-performance\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fwallets\u002Fmetamask-official-recipe-performance\u002FSKILL.md",[],[104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123],"performance","recipe performance","recipe","mm","sentry","harness","app","deterministic","recipes","flow","cold","critical","analysis","tasks","react","browser","layout","screen","network","metamask",{"skillNo":125,"name":126,"nameZh":6,"description":127,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":128,"licenseFileUrl":129,"sourceHtmlUrl":130,"categories":131,"keywords":132,"publishedAt":46},"01M70XT2F8A5CQZ81JBP98KSW3","mexc-spot-websocket","MEXC Spot WebSocket workflows for public streams, protobuf handling, depth maintenance, listen keys, and private streams without exposing API keys.","Apache-2.0","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fexchanges\u002Fmncrftfrcnm-mexc-spot-websocket\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fexchanges\u002Fmncrftfrcnm-mexc-spot-websocket\u002FSKILL.md",[],[133,134,135,42,136,56,137,138,139,140,30,141,142,143],"mexc spot websocket","spot","websocket","workflows","listen","streams","depth","keys","api keys","maintenance","protobuf",{"skillNo":145,"name":146,"nameZh":6,"description":147,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":128,"licenseFileUrl":148,"sourceHtmlUrl":149,"categories":150,"keywords":151,"publishedAt":46},"01M70XT0MBXN3WZY1BKN0CPNKR","mexc-spot-rest","MEXC Spot REST workflows for public data, signed account requests, orders, wallet\u002Fadmin actions, and secure signing without exposing API keys.","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fexchanges\u002Fmncrftfrcnm-mexc-spot-rest\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fexchanges\u002Fmncrftfrcnm-mexc-spot-rest\u002FSKILL.md",[],[152,134,153,154,155,156,157,141,30,140,158,159,160,56,161,136,42],"mexc spot rest","REST","admin","signing","Wallet","requests","actions","secure","data","orders",{"skillNo":163,"name":164,"nameZh":6,"description":165,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":128,"licenseFileUrl":166,"sourceHtmlUrl":167,"categories":168,"keywords":169,"publishedAt":46},"01M70XSYSVZ2N0N91XCAR2CAK0","mexc-futures-websocket","MEXC Futures WebSocket workflows for public streams, private account\u002Forder\u002Fposition streams, ping\u002Fpong, subscriptions, and depth maintenance.","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fexchanges\u002Fmncrftfrcnm-mexc-futures-websocket\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fexchanges\u002Fmncrftfrcnm-mexc-futures-websocket\u002FSKILL.md",[],[170,171,135,172,173,142,30,174,139,138,56,136],"mexc futures websocket","futures","position","ping","subscriptions",{"skillNo":176,"name":177,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":99,"licenseFileUrl":178,"sourceHtmlUrl":179,"categories":180,"keywords":181,"publishedAt":46},"01M6H0ZWHVE5W04WG2DKQE2SQC","0xklen-version-and-refresh-sanctions-lists","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fpayments\u002F0xklen-version-and-refresh-sanctions-lists\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fpayments\u002F0xklen-version-and-refresh-sanctions-lists\u002FSKILL.md",[],[182,183,184],"refresh","0xklen version and refresh sanctions lists","version",{"skillNo":186,"name":187,"nameZh":6,"description":188,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":99,"licenseFileUrl":189,"sourceHtmlUrl":190,"categories":191,"keywords":192,"publishedAt":46},"01M6H0Z28Q3R8J0S799GJQWXM3","verify-tests-cover-changed-lines","Use when a PR adds code that the existing suite may not exercise. Measures patch coverage — the share of newly changed lines hit by tests — before approving.","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fpayments\u002F0xklen-verify-tests-cover-changed-lines\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjiayaoqijia\u002Fcryptoskill\u002Fblob\u002Fmain\u002Fskills\u002Fpayments\u002F0xklen-verify-tests-cover-changed-lines\u002FSKILL.md",[],[193,194,195,196,197,198,199,38,200,201,202],"tests","cover","verify tests cover changed lines","verify","coverage","pr","exercise","patch","code","share"]