Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/openclaw/crabbox/sharegit clone --depth 1 https://github.com/openclaw/crabboxWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.00738 |
| Opus 5 | $0.00000 | $0.00369 |
| Sonnet 5 | $0.00000 | $0.00148 |
| Haiku 4.5 | $0.00000 | $0.00074 |
Grade A, and why
share scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 94 lines — stays where its author put it; the contents beside it link to each section on GitHub.
share
crabbox share grants other people access to an existing lease through the
coordinator. It manages who may see a lease and use its portal bridges; it does
not move SSH private keys between machines.
Sharing requires a configured coordinator. Without one, the command exits with
share requires a configured coordinator.
Direct-provider leases become shareable when broker.mode: registered is set.
The coordinator shares portal capabilities such as WebVNC; it does not gain
provider lifecycle ownership or the local SSH key.
Usage
# Share with a specific user (defaults to role "use")
crabbox share --id swift-crab --user github:12345
# Grant manage access
crabbox share --id swift-crab --user github:12345 --role manage
# Share with everyone in the lease's org
crabbox share --id swift-crab --org
crabbox share --id swift-crab --org --role manage
# Show the current sharing for a lease
crabbox share --id swift-crab --list
crabbox share swift-crab --list --json
The lease can be addressed by its canonical id (cbx_…) or its slug, either via
--id or as the first positional argument.
When you pass neither --user nor --org (or pass --list), the command prints
the current sharing instead of changing it.
Only the lease owner, an admin, or a user with manage access can list or change
sharing. A user with use access can see the lease but cannot enumerate its
sharing roster.
Roles
use see the lease and use visible portal bridges such as WebVNC and code
manage use access plus changing sharing and stopping the lease
A role applies to every --user and to --org named in the same invocation.
--role defaults to use.
Targets
--user <owner>is repeatable. Use the immutablegithub:<numeric-id>owner shown bycrabbox whoamifor a GitHub user. Shared-token automation may use its configured stable owner instead. Values are stored normalized to lowercase and trimmed; an empty value is rejected.--orgshares with authenticated users whose org matches the lease's org.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 94 lines · 0 tokens per session scan A 966ac17a9498
share is a command published in the GitHub repository openclaw/crabbox (1,343 stars, last pushed 2d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 738 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
build-mcp
Build a remote MCP server on Cloudflare using McpAgent.
account
This API allows you to manage your Scaleway Projects.
boss:ship
只跑部署环节：DevOps 构建部署 + 上线前门禁 + 部署报告。对已通过测试的项目单独可用，产出 deploy-report.md，门禁不可绕过。.
domains
Apply the CLI runtime and safety contract before executing a command. Runtime --help is authoritative.
generate-dashboard
Generate OpenShift Console operator dashboard from operator name and CRD discovery.
datadog
Set up and troubleshoot Datadog — Agent deployment on Kubernetes, APM instrumentation, Log Management, Monitors, Dashboards, SLOs, Synthetic tests, and live incident investigation using the Datadog MCP server. Covers Terraform-managed Datadog resources.