← Back to Skills Marketplace
482
Downloads
0
Stars
0
Active Installs
7
Versions
Install in OpenClaw
/install nitan
Description
Use the local Nitan MCP stdio server for uscardforum.com search, reading, monitoring, and auth setup guidance. Secure-by-default wrappers use npx --no-instal...
Usage Guidance
This skill is a thin local bridge to the nitan-mcp CLI and the files match that purpose. Before installing, verify you trust the upstream package (@nitansde/mcp on npm/GitHub) because enabling NITAN_MCP_ALLOW_INSTALL will cause npx to download and run remote code; prefer pinning a version or installing the CLI globally. Be aware that API keys created by the CLI are saved to the platform's default profile location (so review where they are stored if you care about local persistence). Do not paste forum passwords into chat (the skill itself forbids that). If you do not trust the npm package source, do not enable install-on-demand and instead install the CLI from a vetted source or avoid the skill.
Capability Analysis
Type: OpenClaw Skill
Name: nitan
Version: 1.0.6
The nitan skill acts as a bridge to a local MCP server for interacting with uscardforum.com. It demonstrates strong security posture by defaulting to 'npx --no-install' in scripts/mcp_call.sh to prevent unauthorized package downloads and provides an explicit authentication wizard in SKILL.md that avoids handling raw passwords in chat. The implementation uses standard JSON-RPC over stdio and lacks any indicators of data exfiltration, persistence, or malicious execution.
Capability Tags
Capability Assessment
Purpose & Capability
The skill's declared purpose (bridge to a local Nitan MCP stdio server for uscardforum.com) matches the required binaries (npx, nitan-mcp), the npm install spec (@nitansde/mcp), and the included shell/python wrappers. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md instructions confine the agent to launching and communicating with a local MCP subprocess over stdin/stdout, using only the tools exposed by that server. The auth wizard avoids asking for passwords in chat and documents three reasonable auth flows. The instructions do not ask to read unrelated filesystem locations or send data to third-party endpoints.
Install Mechanism
Install uses an npm package (@nitansde/mcp) which is appropriate for a CLI tool. The wrapper defaults to npx --no-install (secure). There is an explicit opt-in (NITAN_MCP_ALLOW_INSTALL) that will run npx -y and install remote package code — this is expected but increases risk if the package/source is untrusted, so pin versions or install globally if you trust it.
Credentials
No required environment variables or secrets are declared. Optional env vars are reasonable for this use case (package override, allow-install flag, response timeout, optional username/password or API key). Requesting NITAN_USERNAME/NITAN_PASSWORD only as an optional password-env mode is proportionate; the skill explicitly instructs not to paste passwords into chat and prefers API keys.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges or modify other skills' configs. It documents that the MCP client saves API keys to the platform's default profile location — reasonable for a client tool but something the user should be aware of.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install nitan - After installation, invoke the skill by name or use
/nitan - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.6
nitan 1.0.6
- Added new wrapper: scripts/discourse_get_trust_level_progress.sh for querying trust level progress.
- Improved authentication guidance: now includes an interactive wizard for API key setup, password environment variable configuration, or public read-only mode.
- Updated documentation (SKILL.md) to explain the new API key authentication flow and clarify env var setup.
- Added _meta.json for better metadata support.
v1.0.5
Fix metadata/env transparency: remove required env gating, mark credentials/timezone/package controls as optional, align SKILL.md with runtime behavior and security review feedback.
v1.0.4
Rename listing to US Card Forum (slug unchanged).
v1.0.3
- Simplified installation and runtime instructions; global install via npm is now recommended.
- Tightened documentation to remove advanced env var and install-on-demand logic.
- Shell wrappers now assume default use: `npx --no-install nitan-mcp`.
- Clarified authentication and tool usage; supports only server-exposed tools, with no fallback logic.
- Security and compliance sections updated for clarity; removed all local repo execution steps.
v1.0.2
Security metadata + env declaration updates; secure-by-default --no-install runner; explicit opt-in install mode via NITAN_MCP_ALLOW_INSTALL; docs/implementation alignment.
v1.0.1
nitan 1.0.1
- No file changes detected in this version.
- No user-facing changes; documentation and behavior remain consistent with the previous release.
v1.0.0
nitan v1.0.0
- Initial release: bridge to local Nitan MCP stdio server for uscardforum.com workflows.
- Supports search, reading, monitoring, and (optionally) posting via stdio MCP tools.
- Includes shell wrappers for core and per-tool calls; no direct forum logic in the skill.
- Read-only by default; posting requires explicit user intent and valid MCP credentials.
- Adheres to strict security and review guidelines; no hidden install steps, secrets, or ambiguous behavior.
Metadata
Frequently Asked Questions
What is US Card Forum?
Use the local Nitan MCP stdio server for uscardforum.com search, reading, monitoring, and auth setup guidance. Secure-by-default wrappers use npx --no-instal... It is an AI Agent Skill for Claude Code / OpenClaw, with 482 downloads so far.
How do I install US Card Forum?
Run "/install nitan" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is US Card Forum free?
Yes, US Card Forum is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does US Card Forum support?
US Card Forum is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created US Card Forum?
It is built and maintained by Nitan SDE (@nitansde); the current version is v1.0.6.
More Skills