← Back to Skills Marketplace
Nova App Builder
by
Zhengfa Dang
· GitHub ↗
· v2.3.1
· MIT-0
758
Downloads
2
Stars
2
Active Installs
47
Versions
Install in OpenClaw
/install nova-app-builder
Description
Build and deploy Nova Platform apps (TEE apps on Sparsity Nova / sparsity.cloud). Use when a user wants to create a Nova app, write enclave application code,...
Usage Guidance
This skill appears to do what it says: scaffold a Nova app and call sparsity.cloud to build/deploy it. Before running: 1) Review the included scaffolded files (enclave/main.py, odyn.py) to ensure endpoints and placeholders are acceptable. 2) Provide only your Nova API key and a GitHub PAT (used for git push); do not supply AWS/S3 credentials or enclaver.yaml as the docs instruct. 3) Consider tightening the egress_allow setting (SKILL defaults to ["**"]) if you want to restrict outbound network access for your app. 4) Test locally in IN_ENCLAVE=false mode first (note: mock Odyn endpoint is external). 5) Watch for the scaffold operation overwriting an existing directory. If you need further assurance, run the scripts in a disposable environment and inspect network calls (or read the code) before using production secrets.
Capability Analysis
Type: OpenClaw Skill
Name: nova-app-builder
Version: 2.3.1
The nova-app-builder skill bundle is a legitimate developer tool designed to scaffold, build, and deploy Trusted Execution Environment (TEE) applications on the Sparsity Nova platform (sparsity.cloud). The bundle includes a project template, a deployment script (scripts/nova_deploy.py), and comprehensive documentation (SKILL.md and references/). While the skill requires sensitive inputs such as a Nova API key and a GitHub Personal Access Token (PAT), these are used strictly for their stated purposes—communicating with the Nova Platform API and pushing code to the user's repository. The code logic is transparent, lacks obfuscation, and contains no evidence of data exfiltration, backdoors, or malicious prompt injection.
Capability Assessment
Purpose & Capability
Name/description (build & deploy Nova apps) match the included assets and scripts: scaffold.py produces a project template; nova_deploy.py calls sparsity.cloud APIs to create/build/deploy apps; enclave client (odyn.py) targets the internal Odyn API. No unrelated credentials or binaries are requested in metadata.
Instruction Scope
SKILL.md and the scripts limit actions to scaffolding local files and calling the Nova Platform APIs. The skill asks the user for a Nova API key and (separately) a GitHub PAT for pushing the repo—these are plausible and documented. Two items to note: (1) the scaffold/advanced default sets egress_allow to ["**"] which is permissive (allows domain egress from the enclave) — this is a functional choice for convenience but broad; (2) in local (mock) mode the Odyn client hits http://odyn.sparsity.cloud:18000, an external mock endpoint (documented as such) — review that behavior before using mock mode.
Install Mechanism
No install spec; the skill is instruction + bundled templates and scripts. All bundled files are included in the skill manifest (no downloads from arbitrary URLs, no extract operations). Scaffold copies included templates to the user's filesystem when run — expected behavior for a generator.
Credentials
The skill metadata requires no environment variables. Runtime instructions and scripts accept a Nova API key and recommend a GitHub PAT for pushes; both are proportionate to the stated purpose. The skill explicitly tells users not to provide Docker/AWS/S3 credentials (the platform manages those). No unexpected secrets or unrelated service credentials are requested.
Persistence & Privilege
The skill is user-invocable, not always-enabled, and does not request persistent system presence or attempt to modify other skills. It does write scaffolded files to the user's target directory when executed — this is normal for a project generator.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install nova-app-builder - After installation, invoke the skill by name or use
/nova-app-builder - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.3.1
Add public App Explorer endpoints (by-tee-wallet, by-onchain-id, batch), paid deployment endpoint, and full auth management APIs (wallet login/SIWE, API key CRUD, profile, password, email verification, token refresh) from nova-api update 2026-03-10
v2.3.0
Update for nova-app-template & sparsity-nova-examples March 2026: nova_python_sdk/ package structure (odyn/kms_client/rpc/env modules), new hello-world-tee example, /.well-known/attestation Caddy routing clarification, Primary API (18000) not publicly exposed, new Odyn endpoints (random, sign-tx, kms/kv), IN_ENCLAVE is app-convention not auto-injected, build-attestation.json provenance notes, nova sales deck + resources links, platform architecture doc links
v2.2.2
Add explorer link (https://sparsity.cloud/explore/{onchain_app_id}) after on-chain registration
v2.2.1
Fix: strip trailing slash from instance_url to prevent double-slash in curl output
v2.2.0
Improve output (emojis, state transitions); fix URL from deployments[0].enclave_info.instance_url; add --dry-run; better error hints; GitHub PAT docs; /api/info endpoint in template
v2.1.3
Fix: read app URL from enclave_info.instance_url (fallback: hostname) via GET /apps/{sqid}/detail
v2.1.2
SKILL.md review: fix portal step numbering; api/app-wallet note; correct kms/wallet advanced field names; Step 6 references nova_deploy.py --onchain
v2.1.1
Fix: Dockerfile.template -> Dockerfile.txt in SKILL.md note
v2.1.0
nova_deploy.py: prompt user for on-chain registration after deploy; add --onchain / --no-onchain flags; implement full 6a-6d on-chain flow
v2.0.5
Add update reminder at top; fix Common Issues entries for old-version symptoms (enclaver.yaml, config.py, console.sparsity.cloud)
v2.0.4
Fix: Dockerfile.txt now correctly packaged by clawhub (was Dockerfile.template which is not whitelisted)
v2.0.3
Use Dockerfile.template instead of inline generation; cleaner and more maintainable
v2.0.2
Doc: explain Dockerfile missing issue and workaround; add to Common Issues
v2.0.1
Fix: attestation endpoint returns raw CBOR bytes; fix Step 6 comment numbering
v2.0.0
Full rewrite: correct steps, no enclaver.yaml, Dockerfile inline
v1.5.1
Fix step numbering; remove duplicate step titles; all local tests passing
v1.5.0
Fix ownership; clean publish under correct account
v1.4.9
Remove all enclaver.yaml references; repo needs only Dockerfile + app code, advanced field handles the rest
v1.4.8
Remove enclaver.yaml references; all config via advanced field at app creation
v1.4.7
debug
Metadata
Frequently Asked Questions
What is Nova App Builder?
Build and deploy Nova Platform apps (TEE apps on Sparsity Nova / sparsity.cloud). Use when a user wants to create a Nova app, write enclave application code,... It is an AI Agent Skill for Claude Code / OpenClaw, with 758 downloads so far.
How do I install Nova App Builder?
Run "/install nova-app-builder" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Nova App Builder free?
Yes, Nova App Builder is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Nova App Builder support?
Nova App Builder is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Nova App Builder?
It is built and maintained by Zhengfa Dang (@zfdang); the current version is v2.3.1.
More Skills