Nano Gpt Plugin

Access dynamic NanoGPT models with API key authentication, usage tracking, and support for multiple model families in the OpenClaw platform.

This package appears to be a real OpenClaw provider for NanoGPT, but there are a few issues to check before installing: - Confirm API-key handling: the plugin expects a NANOGPT_API_KEY (see provider config and code) but the registry metadata claims no required env vars — ask the publisher to correct the metadata so you know what credentials are required. - Do NOT run final_integration_test.sh or any included test scripts against an untrusted or public remote host. The script copies the plugin to a remote 'ssh_gateway', runs onboarding with "$NANOGPT_API_KEY" on the remote side, and scp's logs and session files back — this will expose your API key and any session transcripts to that host. - If you want to use the plugin, prefer installing it via your trusted OpenClaw workflows (openclaw plugins install from a vetted package) and only provide the NanoGPT API key to OpenClaw via its documented onboarding mechanism. Verify openclaw.plugin.json/providerAuthChoices are set up as you expect. - Ask the publisher for a homepage/repository URL and a signed/verified package publication source. The registry shows an owner id but no homepage — lack of provenance reduces trust. - If you need higher assurance, request the publisher to remove or sanitize integration scripts (or document them clearly), or run a code review in a sandboxed environment first. If you can confirm the metadata and that you will not run the remote test script (or that the remote host is fully controlled/trusted), the plugin's code and behavior look coherent with its stated purpose. Otherwise treat the integration/test artifacts as a potential leak path for your API key and session data.

Type: OpenClaw Skill Name: nano-gpt-plugin Version: 0.1.3 The bundle is a legitimate OpenClaw provider plugin for NanoGPT, implementing model catalog discovery, authentication, and usage tracking. While the 'final_integration_test.sh' script performs powerful remote operations via SSH (syncing files, installing plugins, and executing commands), these are clearly scoped for development and integration testing. The core logic in 'src/provider.ts' and 'src/catalog.ts' aligns with the stated purpose of integrating with the NanoGPT API (nano-gpt.com), and the documentation (SKILL.md, AGENTS.md) contains standard development instructions without evidence of prompt injection or malicious intent.