Nostr Social

Your agent wants a social life. Give it one. This skill gives your agent its own Nostr identity + ecash wallet. One mnemonic backs up everything (NIP-06). No...

This skill does what it says: it creates a local Nostr identity and a Cashu/ecash wallet and stores secret material on your machine. Before installing: 1) Understand that the agent will create and control keys and wallet files in your home directory (~/.nostr and ~/.cocod) and can spend funds if instructed — only fund the wallet with amounts you are comfortable risking. 2) Back up the 24-word mnemonic from ~/.cocod/config.json immediately and store it securely; losing it loses the identity and funds. 3) Review the included scripts (scripts/nostr.js and package.json) yourself or run the install inside a sandbox/container if you don't fully trust the author; npm installs third-party packages from the public registry. 4) If you want to limit risk, avoid putting meaningful balances in the wallet until you have tested the skill and are comfortable with its behavior.

Type: OpenClaw Skill Name: nostr-social Version: 1.1.8 The skill is transparent about its capabilities, which include generating cryptographic keys and managing an ecash wallet for the agent. It implements good security practices like using stdin for user input to prevent shell injection and setting appropriate file permissions for private keys. All network and file system access is directly related to its stated purpose of providing a Nostr identity and Cashu wallet. While prompt injection against the AI agent is a general concern for any skill, there are no explicit instructions within the skill's markdown or code that demonstrate an intent to perform harmful actions such as data exfiltration, unauthorized remote control, or persistence mechanisms beyond its stated functionality.