← Back to Skills Marketplace
satbot-mdk

unhuman

by Satbot · GitHub ↗ · v1.0.2
cross-platform ✓ Security Clean
573
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install unhuman
Description
Search, register, and manage domain names via unhuman.domains. Pay with bitcoin using agent-wallet. Use when the user wants to find available domains, regist...
Usage Guidance
This skill appears to be what it claims: a wrapper for the unhuman npm CLI that can register domains and (optionally) pay via an agent-wallet. Before installing and running it: 1) Inspect the npm package (publisher 'moneydevkit') and, if possible, review its source code to ensure it behaves as documented. 2) Be cautious with the --wallet flag — only enable it when the user explicitly authorizes a real bitcoin payment; the CLI can trigger real payments. 3) Protect the token file (~/.unhuman/tokens.json) and the agent-wallet directory (~/.agent-wallet/) because they contain sensitive credentials; make sure you understand how those are created and backed up. 4) Consider running npx commands manually the first time to verify behavior before letting an agent invoke them autonomously.
Capability Analysis
Type: OpenClaw Skill Name: unhuman Version: 1.0.2 The skill bundle describes a legitimate domain management tool that interacts with unhuman.domains and supports Bitcoin payments via an agent-wallet. It uses standard npm package installation and explicitly warns the AI agent to confirm with the user before initiating financial transactions using the `--wallet` flag. While the skill involves managing sensitive data (domain management tokens, wallet keys) stored locally, there is no evidence of intentional data exfiltration, malicious execution, persistence mechanisms, or deceptive prompt injection against the agent. Potential shell injection via the `dns set` command is a vulnerability in how an agent might construct arguments, not an indicator of malicious intent within the skill definition itself.
Capability Assessment
Purpose & Capability
The name/description (domain search, registration, management) matches the declared runtime actions: running the 'unhuman' CLI via npx / npm. The npm install spec (package 'unhuman') is expected for this purpose.
Instruction Scope
SKILL.md contains concrete CLI commands and explicitly describes how payments and token storage work. It instructs use of the agent-wallet only with explicit user consent, and documents that management tokens are stored at ~/.unhuman/tokens.json and agent-wallet state at ~/.agent-wallet/. The instructions do not ask the agent to read unrelated system files or credentials, but they do create and read files in the user's home directory (token storage and wallet state).
Install Mechanism
Install uses the public npm package 'unhuman' (moderate risk profile: installs code from the npm registry). This is proportionate for a CLI provided via npm, but it means you should verify the package's publisher and source before installing.
Credentials
No environment variables are declared, which aligns with SKILL.md. However, the instructions reference and rely on local files (~/.unhuman/tokens.json and ~/.agent-wallet/) for sensitive data (management tokens and wallet keys). Those config paths were not listed in the skill's metadata 'required config paths' field — a mild metadata omission that users should be aware of because these files contain sensitive tokens/keys.
Persistence & Privilege
The skill does not request always: true, does not modify other skills or system-wide configs, and only writes to its own token path under the user's home directory. Agent autonomy for payment is gated by an explicit --wallet flag and the SKILL.md warns to always confirm with the user before using it.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install unhuman
  3. After installation, invoke the skill by name or use /unhuman
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
security scanner fixes: added install metadata, credential docs, wallet safety warnings, explicit user confirmation requirement for payments
v1.0.1
domain management CLI
v1.0.0
initial release — domain search, register, dns, nameservers, renew, recover, agent-wallet auto-pay
Metadata
Slug unhuman
Version 1.0.2
License
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is unhuman?

Search, register, and manage domain names via unhuman.domains. Pay with bitcoin using agent-wallet. Use when the user wants to find available domains, regist... It is an AI Agent Skill for Claude Code / OpenClaw, with 573 downloads so far.

How do I install unhuman?

Run "/install unhuman" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is unhuman free?

Yes, unhuman is completely free (open-source). You can download, install and use it at no cost.

Which platforms does unhuman support?

unhuman is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created unhuman?

It is built and maintained by Satbot (@satbot-mdk); the current version is v1.0.2.

💬 Comments