← 返回 Skills 市场
Keychat
作者
keychat.io
· GitHub ↗
· v1.1.1
628
总下载
0
收藏
1
当前安装
6
版本数
在 OpenClaw 中安装
/install keychat
功能描述
Install Keychat — sovereign E2E encrypted messaging for OpenClaw agents via Signal Protocol over Nostr relays. Use when the user wants to add Keychat or set...
使用说明 (SKILL.md)
Install Keychat
openclaw plugins install @keychat-io/keychat
openclaw gateway restart
Supported platforms: macOS (ARM/x64), Linux (x64/ARM64).
The plugin automatically downloads the bridge binary, configures channels.keychat in openclaw.json, and generates a new Nostr identity on first start.
The agent will send its Keychat ID (npub1...), contact link, and QR code to the user's active chat after first install.
Security Warnings
The scanner may show two warnings during install. Both are expected:
- bridge-client.ts — Spawns a Rust sidecar for Signal Protocol and MLS Protocol encryption (Keychat's crypto is implemented in Rust, needs bridging to Node.js)
- keychain.ts — Stores identity mnemonics in the OS keychain (macOS Keychain / Linux libsecret) for security
Upgrade
Tell the agent "upgrade keychat" in any chat, or manually:
openclaw plugins install @keychat-io/keychat@latest
openclaw gateway restart
Connect
After install, the user can add the agent as a Keychat contact:
- Open the Keychat app → tap Add Contact
- Scan the QR code, or paste the agent's npub
- The agent automatically accepts and establishes an encrypted session
The user can also ask the agent "what's my Keychat ID" at any time to get the npub, link, and QR code.
More info: github.com/keychat-io/keychat-openclaw
安全使用建议
This skill appears to do what it says (installing a Keychat plugin), but it performs sensitive operations: it downloads and executes a native bridge binary, stores private identity mnemonics in your OS keychain, writes config to openclaw.json, and will broadcast the agent's Keychat ID/QR and auto-accept contacts. Before installing: (1) verify the plugin package provenance (inspect the @keychat-io/keychat package and the GitHub repo link provided) and confirm the URL used to fetch the bridge binary; (2) review the plugin code or ask the maintainer where binaries are hosted and whether checksums/signatures are provided; (3) confirm you are comfortable with the agent automatically creating and sharing an identity and auto-accepting contacts (consider disabling auto-accept if possible); (4) consider installing first in a sandbox or test agent; and (5) ensure you understand how to revoke/delete the generated identity and where mnemonics are backed up. If you cannot verify the binary provenance or code, treat the install as higher risk.
功能分析
Type: OpenClaw Skill
Name: keychat
Version: 1.1.1
The skill automates the installation of a third-party plugin (@keychat-io/keychat) that performs high-risk operations, including spawning a Rust sidecar binary and accessing the OS keychain (macOS Keychain/Linux libsecret). While these actions are documented in SKILL.md as necessary for Signal Protocol encryption and identity management, the execution of external binaries and access to sensitive system credential stores are significant security risks that require verification of the underlying plugin's integrity.
能力评估
Purpose & Capability
Name/description match the runtime instructions: the SKILL tells the agent to install the @keychat-io/keychat plugin and restart the gateway. Automatic configuration of channels.keychat, creation of a Nostr identity, and exposing the agent's Keychat ID/QR to the user are consistent with a messaging plugin.
Instruction Scope
The SKILL.md stays within the claimed purpose (install plugin, restart gateway). It explicitly states that after install the agent will generate an identity, store mnemonics in the OS keychain, and send the agent's npub/QR to the user's active chat and automatically accept contacts — all relevant to messaging but also privacy-sensitive and potentially surprising to users.
Install Mechanism
The skill is instruction-only and runs `openclaw plugins install @keychat-io/keychat`. The SKILL.md warns the plugin will download a 'bridge binary' (Rust sidecar) and spawn it. Because there is no install manifest here describing where that binary is fetched from, the install will cause an external native binary to be written to disk and executed — a higher-risk operation unless the download provenance is verified.
Credentials
No external API keys or env vars are requested (proportionate), but the plugin stores identity mnemonics in the OS keychain (macOS Keychain / Linux libsecret). That requires access to system secrets/storage and is not reflected in the skill's declared requirements; storing/using long-lived cryptographic secrets is sensitive and should be explicitly acknowledged.
Persistence & Privilege
The skill does not request always:true and does not claim elevated platform privileges. It will modify agent configuration (channels.keychat in openclaw.json) and persist identity material in the OS keychain, which is normal for a messaging plugin but results in ongoing presence and the ability to receive messages and accept contacts automatically — a behavior users might want to approve explicitly.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install keychat - 安装完成后，直接呼叫该 Skill 的名称或使用
/keychat触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.1
Updated SKILL.md: refined install/upgrade/connect instructions, added security warnings section
v1.0.1
Update install instructions, add security warnings and upgrade guide
v1.2.0
Fix YAML description quoting, update security warnings to 2, correct package name
v0.1.60
Fix YAML frontmatter parse error, update security warnings from 3 to 2
v1.1.0
Add install command to description
v1.0.0
Keychat 1.0.0 initial release
- Adds easy installation of Keychat for OpenClaw agents.
- Enables E2E encrypted messaging powered by Signal Protocol over Nostr relays.
- Supports macOS (ARM/x64) and Linux (x64/ARM64).
- Automatically generates a Nostr identity and shares connection details (npub, link, QR code) after install.
- Advises expected security warnings during install for transparency.
元数据
常见问题
Keychat 是什么？
Install Keychat — sovereign E2E encrypted messaging for OpenClaw agents via Signal Protocol over Nostr relays. Use when the user wants to add Keychat or set... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 628 次。
如何安装 Keychat？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install keychat」即可一键安装，无需额外配置。
Keychat 是免费的吗？
是的，Keychat 完全免费（开源免费），可自由下载、安装和使用。
Keychat 支持哪些平台？
Keychat 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Keychat？
由 keychat.io（@kcdev001）开发并维护，当前版本 v1.1.1。
推荐 Skills