← Back to Skills Marketplace
1622
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install quantum-forge
Description
Decentralized AI platform using simulated quantum algorithms on Nostr for real-time swarm collaboration, tokenized compute exchange, and multi-chain AI asset...
Usage Guidance
This skill is inconsistent and potentially risky. Before installing or running it: 1) Do not export or use a private key (NOSTR_PRIVATE_KEY) until you have audited the code — the SKILL.md even shows an incorrect example that could leak keys. 2) Verify the GitHub repo (https://github.com/quantumforge/quantumforge.git) exists, inspect its code, and ensure dependencies and init scripts are safe; do not run npm/pip installs blindly. 3) Treat the relay domain (wss://relay.quantumforge.org) as untrusted until you can confirm ownership and behavior; publishing events there could leak identity or keys. 4) Expect additional undisclosed credentials for minting/zaps (wallet/private keys); require explicit listing and least-privilege tokens, not full private keys. 5) If you want to test, do so in an isolated environment with ephemeral keys and read-only configurations. 6) Prefer to see the skill include an explicit install spec, declared required env vars, and a clear privacy/security section; absence of those is a red flag. If you cannot review the external repo and init scripts yourself, avoid installing or running this skill.
Capability Analysis
Type: OpenClaw Skill
Name:
Developer:
Version:
Description: OpenClaw Agent Skill
The skill bundle is classified as suspicious due to its reliance on external dependencies and the handling of sensitive information. The `SKILL.md` instructs the agent to `git clone` a repository and run `npm install` or `pip install -r requirements.txt`, which introduces supply chain risks if the specified GitHub repository or its dependencies are compromised. Additionally, it requires setting `NOSTR_PRIVATE_KEY` as an environment variable, which, while necessary for its stated purpose, is a sensitive operation. There is no clear evidence of intentional malicious behavior like data exfiltration or unauthorized remote control, but the inherent risks associated with these operations elevate it beyond benign.
Capability Assessment
Purpose & Capability
The SKILL.md describes a large decentralized quantum/blockchain system and instructs cloning a GitHub repo and installing Node/Python dependencies, but the registry metadata declares no code, no install spec, and no required env vars. The manifest and metadata do not align with the heavy capabilities described (multi-chain minting, cash zaps, network relays). The instructions also rely on external services (relay.quantumforge.org, GitHub repo) that are not validated or declared in the registry metadata.
Instruction Scope
The runtime instructions tell the agent to: git clone an external repository, run npm/pip installs, export a NOSTR_PRIVATE_KEY and RELAY_URL environment variables, initialize and bootstrap into a swarm, publish events to relays, and perform zaps/minting. These are network- and key-sensitive operations that go beyond a simple instruction-only skill. The JS example wrongly uses the private-key env var as the event 'pubkey' (which could leak a private key if used as-is). The instructions implicitly require crypto wallet operations (minting, zaps) but do not declare or justify the needed credentials. Overall the instructions ask the agent to read/set/transmit secrets and to perform network actions not represented in the declared requirements.
Install Mechanism
There is no declared install spec in the registry, but SKILL.md instructs cloning https://github.com/quantumforge/quantumforge.git and running npm/pip installs and init scripts. Downloading and executing code from an external GitHub repo is an implicit install mechanism and introduces risk because the repository and its contents are not included in the package, not pinned, and not validated. The relay URL is a project-owned domain (wss://relay.quantumforge.org) rather than a well-known public endpoint; that increases trust burden.
Credentials
Declared requirements list no env vars or credentials, yet SKILL.md explicitly requires NOSTR_PRIVATE_KEY and RELAY_URL and implies further crypto keys for multi-chain minting and zaps. Requiring a private key in an environment variable is sensitive and should be declared and justified. The mismatch between declared and required credentials is disproportionate and risky. The example code also mishandles keys (using a private key as the pubkey), increasing the chance of accidental key exposure.
Persistence & Privilege
The skill does not request always:true and is user-invocable (normal). It enables autonomous invocation by default (disable-model-invocation: false), which is standard, but combined with the above concerns (network commands, key usage, external code execution) means an autonomously-invoked agent could perform network actions and transactions. The skill does not request modifying other skill configs or system-wide settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install quantum-forge - After installation, invoke the skill by name or use
/quantum-forge - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
QuantumForge 1.0.0 – Initial Release
- Launches a decentralized AI orchestration platform powered by the Nostr protocol.
- Introduces quantum-enhanced model forging, decentralized swarm intelligence, and tokenized compute exchange.
- Enables multi-chain asset minting and seamless integration with Ethereum, Bitcoin, and other chains.
- Implements robust privacy with zero-knowledge proofs, homomorphic encryption, and sharding.
- Provides a modular architecture for swarm collaboration, agent autonomy, and DAO-driven protocol evolution.
- Supplies instant onboarding, agent scripting (Node.js/Python), and comprehensive developer documentation.
Metadata
Frequently Asked Questions
What is QuantumForge?
Decentralized AI platform using simulated quantum algorithms on Nostr for real-time swarm collaboration, tokenized compute exchange, and multi-chain AI asset... It is an AI Agent Skill for Claude Code / OpenClaw, with 1622 downloads so far.
How do I install QuantumForge?
Run "/install quantum-forge" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is QuantumForge free?
Yes, QuantumForge is completely free (open-source). You can download, install and use it at no cost.
Which platforms does QuantumForge support?
QuantumForge is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created QuantumForge?
It is built and maintained by KOSASIH (@kosasih); the current version is v1.0.0.
More Skills