← Back to Skills Marketplace
talvasconcelos

LNbits Wallet

by talvasconcelos · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1756
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install lnbits
Description
Manage LNbits Lightning Wallet (Balance, Pay, Invoice)
README (SKILL.md)

LNbits Wallet Manager

Enable the assistant to safely and effectively manage an LNbits Lightning Network wallet.

🛑 CRITICAL SECURITY PROTOCOLS 🛑

  1. NEVER Expose Secrets: Do NOT display Admin Keys, User IDs, or Wallet IDs.
  2. Explicit Confirmation: You MUST ask for "Yes/No" confirmation before paying.
    • Format: "I am about to send [Amount] sats to [Memo/Dest]. Proceed? (y/n)"
  3. Check Balance First: Always call balance before pay to prevent errors.

Usage

0. Setup / Create Wallet

If the user does not have an LNbits wallet, you can create one for them on the demo server.

python3 {baseDir}/scripts/lnbits_cli.py create --name "My Wallet"

Action:

  1. Run the command.
  2. Capture the adminkey (Admin Key) and base_url (defaults to https://demo.lnbits.com).
  3. IMPORTANT: Instruct the user to save these credentials securely:

    "I've created a new wallet! Please add these to your Moltbot configuration or .env file: export LNBITS_BASE_URL=https://demo.lnbits.com export LNBITS_API_KEY=\x3Cadminkey>"

1. Check Balance

Get the current wallet balance in Satoshis.

python3 {baseDir}/scripts/lnbits_cli.py balance

2. Create Invoice (Receive)

Generate a Bolt11 invoice to receive funds.

  • amount: Amount in Satoshis (Integer).
  • memo: Optional description.
python3 {baseDir}/scripts/lnbits_cli.py invoice --amount 1000 --memo "Pizza"

3. Pay Invoice (Send)

⚠️ REQUIRES CONFIRMATION: Decode first, verify balance, ask user, then execute.

# Step 1: Decode to verify amount/memo
python3 {baseDir}/scripts/lnbits_cli.py decode \x3Cbolt11_string>

# Step 2: Pay (Only after user CONFIRMS)
python3 {baseDir}/scripts/lnbits_cli.py pay \x3Cbolt11_string>

Error Handling

If the CLI returns a JSON error (e.g., {"error": "Insufficient funds"}), summarize it clearly for the user. Do not show raw stack traces.

Usage Guidance
Before installing: (1) Confirm the registry metadata is corrected to reflect the required python3 binary and the two env vars declared in SKILL.md. (2) Review the bundled script (scripts/lnbits_cli.py) source to verify it only calls the LNbits API and does not exfiltrate keys or perform unexpected network activity. (3) Prefer using a least-privilege key (a payment/readonly key) instead of an adminkey; if adminkey is required, be aware it allows full wallet control. (4) Prevent autonomous payments: set disableModelInvocation=true or ensure the skill is user-invocable only, and enforce interactive confirmation outside the agent if possible. (5) If you must store credentials, use secure secret storage rather than a plain .env file and audit who/what can read them. If you cannot review the script or prevent autonomous invocation, treat the skill as high-risk and do not install it with real funds or admin keys.
Capability Analysis
Type: OpenClaw Skill Name: lnbits Version: 1.0.0 The skill is classified as suspicious due to the explicit instruction in `SKILL.md` for the AI agent to output the `adminkey` (Admin Key) after creating a new LNbits wallet. While this is intended for the user to configure their environment, exposing such a highly sensitive credential directly in the agent's output is a significant security risk, as the `adminkey` grants full control over the wallet. This represents a risky capability, even if the intent is not clearly malicious exfiltration to an unauthorized third party.
Capability Assessment
Purpose & Capability
The SKILL.md, metadata, and the included script all describe LNbits wallet operations and require python3 plus LNBITS_API_KEY and LNBITS_BASE_URL, which is coherent with the claimed purpose. However, the registry summary at the top of the submission incorrectly lists no required env vars or binaries, creating a metadata mismatch that should be resolved.
Instruction Scope
Runtime instructions explicitly tell the assistant to create wallets, capture adminkey/base_url, check balance, decode invoices, and send payments. The SKILL.md includes good safety guidance (never expose secrets, require explicit user confirmation before pay), but it also instructs the assistant to instruct the user to store the adminkey in the agent's config or .env — which elevates scope by creating persistent, high-privilege credentials available to the agent.
Install Mechanism
There is no install spec (instruction-only with a bundled Python script). That is low-risk from an installer perspective, but the bundled script will be executed with python3 at runtime — review the script's source for unexpected behavior before allowing execution.
Credentials
The skill requires two environment variables (LNBITS_API_KEY and LNBITS_BASE_URL), which are appropriate for an LNbits integration. The concern is that the expected key is the adminkey (full admin key) per the instructions; an adminkey grants broad control of a wallet and is higher privilege than a user-specific key. Requiring/storing an adminkey in the agent environment is a disproportionate privilege unless explicitly justified.
Persistence & Privilege
The skill does not set disableModelInvocation, so the model can invoke it autonomously. Combined with a potentially powerful adminkey stored in the environment, this creates risk that the model could initiate payments or other privileged actions without additional user consent. The SKILL.md requires asking for confirmation before paying, but that is an instruction and not an enforcement mechanism.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install lnbits
  3. After installation, invoke the skill by name or use /lnbits
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
LNbits version 1.0.0 – Initial Release - Enables wallet management for LNbits Lightning wallets: check balance, pay invoices, create/receive invoices. - Enforces critical security protocols: does not display LNbits secrets and requires explicit user confirmation before sending payments. - Automatically checks wallet balance before any payment attempt. - Provides step-by-step usage instructions for wallet setup, balance checks, receiving, and sending payments. - Summarizes errors clearly without showing raw traces for better user experience.
Metadata
Slug lnbits
Version 1.0.0
License
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is LNbits Wallet?

Manage LNbits Lightning Wallet (Balance, Pay, Invoice). It is an AI Agent Skill for Claude Code / OpenClaw, with 1756 downloads so far.

How do I install LNbits Wallet?

Run "/install lnbits" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is LNbits Wallet free?

Yes, LNbits Wallet is completely free (open-source). You can download, install and use it at no cost.

Which platforms does LNbits Wallet support?

LNbits Wallet is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created LNbits Wallet?

It is built and maintained by talvasconcelos (@talvasconcelos); the current version is v1.0.0.

💬 Comments