← Back to Skills Marketplace
742
Downloads
1
Stars
0
Active Installs
10
Versions
Install in OpenClaw
/install nihao
Description
Nostr identity setup and health-check CLI. Creates a complete Nostr identity (keypair, profile, relay list, lightning address, Cashu wallet) in one command....
Usage Guidance
This skill appears to do what it says (build a Nostr CLI and create/check identities). Things to consider before installing: 1) go install pulls and builds upstream source—review or pin the GitHub repo/commit if you require stronger supply-chain guarantees; 2) by default the tool may emit the secret key (nsec) to stdout/JSON — ensure agent logs do not leak stdout, or use --nsec-file (0600) or --nsec-cmd to store the secret in a secure local password store; 3) avoid passing secrets on the command line (the SKILL.md also warns about this); 4) run the build/install in a controlled environment if you don't trust the remote code; and 5) if you need higher assurance, audit the repository code and its dependencies before compiling.
Capability Analysis
Type: OpenClaw Skill
Name: nihao
Version: 0.12.3
The 'nihao' skill is a Nostr identity management utility that allows an agent to generate keypairs, set up profiles, and perform health checks. It installs via 'go install' from a public GitHub repository (github.com/dergigi/nihao) and provides clear instructions for the agent to handle private keys securely using file permissions (0600) and non-interactive flags. No evidence of data exfiltration, malicious execution, or prompt injection was found; the tool's capabilities and instructions are entirely consistent with its stated purpose.
Capability Assessment
Purpose & Capability
The name/description align with the declared capabilities (keypair generation, publishing Nostr events, relay probes, LNURL/Cashu interactions). No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md instructs the agent to fetch and locally compile the nihao Go tool and to run it to generate/publish identities and perform health checks. The instructions explicitly surface secret handling: by default nsec may be printed to stdout (or can be written to a file or piped to a command). This is expected for an identity CLI but means the agent must avoid exposing stdout to untrusted logs and must use --nsec-file/--nsec-cmd or stdin to protect secrets.
Install Mechanism
No prebuilt binaries; install uses 'go install github.com/dergigi/nihao@latest' which fetches source from GitHub and compiles locally. This is a common pattern but still executes third-party code (and its dependencies) on the host—moderate trust required. No arbitrary archive downloads or personal servers are used.
Credentials
The skill requests no environment variables or external credentials. Its options for persisting secrets (file or piping to a command) are appropriate for the purpose; however those mechanisms can be misused to expose secrets if the operator is careless.
Persistence & Privilege
always:false and default invocation privileges are appropriate. The skill does not request persistent system-wide configuration or cross-skill access. It will write a secret file only if the installer/agent uses the --nsec-file flag.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install nihao - After installation, invoke the skill by name or use
/nihao - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.12.3
Updated skill documentation to reflect nip17.com DM relay defaults
v0.12.2
- Updated installation instructions and prerequisites for clarity: now emphasizes Go 1.21+ is required and installation is always from source using the Go toolchain.
- Stronger guidance on secure key handling: recommends using --nsec-file or --nsec-cmd to persist sensitive keys, discourages passing secrets as command-line arguments.
- Enhanced explanation of key management options, including security notes about process listings and shell history.
- General rewording and expansion for improved clarity and actionable guidance during install and setup.
v0.12.1
nihao 0.12.1
- No user-facing changes detected in this release.
- Documentation, behavior, and interface remain consistent with the previous version.
v0.12.0
Add --nsec-file for AV-friendly key storage, --nsec-exec alias for --nsec-cmd, SKILL.md recommends --nsec-file as default
v0.11.4
Sync with repo v0.11.4: backup command, custom relays, NIP-05 input, connection pooling, unknown flag detection, bare relay marker fix
v0.3.0
NIP-65 relay markers, kind 10050 DM relays, relay quality analysis, connection pooling, rate limiting
v0.2.0
Rewrite description — self-sovereign identity and unstoppable money in one command
v0.1.2
Remove shell examples from SKILL.md to clear moderation flag
v0.1.1
Simplified shell examples to avoid security flags
v0.1.0
Initial release — Nostr identity setup & health-check skill for the nihao CLI
Metadata
Frequently Asked Questions
What is Skill?
Nostr identity setup and health-check CLI. Creates a complete Nostr identity (keypair, profile, relay list, lightning address, Cashu wallet) in one command.... It is an AI Agent Skill for Claude Code / OpenClaw, with 742 downloads so far.
How do I install Skill?
Run "/install nihao" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Skill free?
Yes, Skill is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Skill support?
Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Skill?
It is built and maintained by dergigi (@dergigi); the current version is v0.12.3.
More Skills