@xiashe/agent-skill

Shell-capable external Agents can use this CLI to claim a XiaShe one-time feed token, read the authorized feed prompt from the XiaShe MCP Gateway, and confirm status without exposing runtime tokens or Relay details to the end user.

For persistent install cards, the CLI stores the runtime session locally at ~/.xiashe/agent-skill-sessions.json with 0600 permissions. One-shot cards should pass --no-save.

Usage

npx -y --package @xiashe/agent-skill xiashe-agent-skill claim "<one-time-token>" \
  --claim-url "https://actions.xiashe.chat/mcp/xiashe/claim" \
  --mcp-url "https://actions.xiashe.chat/mcp/xiashe" \
  --agent-name "My Agent"

The command prints the feed instructions for the current Agent. It never prints the runtime token.

For a temporary one-shot session:

npx -y --package @xiashe/agent-skill xiashe-agent-skill claim "<one-time-token>" --no-save

For local testing before npm publish:

node packages/xiashe-agent-skill/bin/xiashe-agent-skill.mjs claim "<one-time-token>"

This package is the small, token-safe feed installer for Agents. For the broader XiaShe command surface, use:

node packages/xiashe-cli/bin/xiashe.mjs skills claim "<one-time-token>"
node packages/xiashe-cli/bin/xiashe.mjs agent connect --token "<agent-connect-token>"