← 返回 Skills 市场
talvasconcelos

LNbits Wallet

作者 talvasconcelos · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1756
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install lnbits
功能描述
Manage LNbits Lightning Wallet (Balance, Pay, Invoice)
使用说明 (SKILL.md)

LNbits Wallet Manager

Enable the assistant to safely and effectively manage an LNbits Lightning Network wallet.

🛑 CRITICAL SECURITY PROTOCOLS 🛑

  1. NEVER Expose Secrets: Do NOT display Admin Keys, User IDs, or Wallet IDs.
  2. Explicit Confirmation: You MUST ask for "Yes/No" confirmation before paying.
    • Format: "I am about to send [Amount] sats to [Memo/Dest]. Proceed? (y/n)"
  3. Check Balance First: Always call balance before pay to prevent errors.

Usage

0. Setup / Create Wallet

If the user does not have an LNbits wallet, you can create one for them on the demo server.

python3 {baseDir}/scripts/lnbits_cli.py create --name "My Wallet"

Action:

  1. Run the command.
  2. Capture the adminkey (Admin Key) and base_url (defaults to https://demo.lnbits.com).
  3. IMPORTANT: Instruct the user to save these credentials securely:

    "I've created a new wallet! Please add these to your Moltbot configuration or .env file: export LNBITS_BASE_URL=https://demo.lnbits.com export LNBITS_API_KEY=\x3Cadminkey>"

1. Check Balance

Get the current wallet balance in Satoshis.

python3 {baseDir}/scripts/lnbits_cli.py balance

2. Create Invoice (Receive)

Generate a Bolt11 invoice to receive funds.

  • amount: Amount in Satoshis (Integer).
  • memo: Optional description.
python3 {baseDir}/scripts/lnbits_cli.py invoice --amount 1000 --memo "Pizza"

3. Pay Invoice (Send)

⚠️ REQUIRES CONFIRMATION: Decode first, verify balance, ask user, then execute.

# Step 1: Decode to verify amount/memo
python3 {baseDir}/scripts/lnbits_cli.py decode \x3Cbolt11_string>

# Step 2: Pay (Only after user CONFIRMS)
python3 {baseDir}/scripts/lnbits_cli.py pay \x3Cbolt11_string>

Error Handling

If the CLI returns a JSON error (e.g., {"error": "Insufficient funds"}), summarize it clearly for the user. Do not show raw stack traces.

安全使用建议
Before installing: (1) Confirm the registry metadata is corrected to reflect the required python3 binary and the two env vars declared in SKILL.md. (2) Review the bundled script (scripts/lnbits_cli.py) source to verify it only calls the LNbits API and does not exfiltrate keys or perform unexpected network activity. (3) Prefer using a least-privilege key (a payment/readonly key) instead of an adminkey; if adminkey is required, be aware it allows full wallet control. (4) Prevent autonomous payments: set disableModelInvocation=true or ensure the skill is user-invocable only, and enforce interactive confirmation outside the agent if possible. (5) If you must store credentials, use secure secret storage rather than a plain .env file and audit who/what can read them. If you cannot review the script or prevent autonomous invocation, treat the skill as high-risk and do not install it with real funds or admin keys.
功能分析
Type: OpenClaw Skill Name: lnbits Version: 1.0.0 The skill is classified as suspicious due to the explicit instruction in `SKILL.md` for the AI agent to output the `adminkey` (Admin Key) after creating a new LNbits wallet. While this is intended for the user to configure their environment, exposing such a highly sensitive credential directly in the agent's output is a significant security risk, as the `adminkey` grants full control over the wallet. This represents a risky capability, even if the intent is not clearly malicious exfiltration to an unauthorized third party.
能力评估
ℹ Purpose & Capability
The SKILL.md, metadata, and the included script all describe LNbits wallet operations and require python3 plus LNBITS_API_KEY and LNBITS_BASE_URL, which is coherent with the claimed purpose. However, the registry summary at the top of the submission incorrectly lists no required env vars or binaries, creating a metadata mismatch that should be resolved.
⚠ Instruction Scope
Runtime instructions explicitly tell the assistant to create wallets, capture adminkey/base_url, check balance, decode invoices, and send payments. The SKILL.md includes good safety guidance (never expose secrets, require explicit user confirmation before pay), but it also instructs the assistant to instruct the user to store the adminkey in the agent's config or .env — which elevates scope by creating persistent, high-privilege credentials available to the agent.
✓ Install Mechanism
There is no install spec (instruction-only with a bundled Python script). That is low-risk from an installer perspective, but the bundled script will be executed with python3 at runtime — review the script's source for unexpected behavior before allowing execution.
⚠ Credentials
The skill requires two environment variables (LNBITS_API_KEY and LNBITS_BASE_URL), which are appropriate for an LNbits integration. The concern is that the expected key is the adminkey (full admin key) per the instructions; an adminkey grants broad control of a wallet and is higher privilege than a user-specific key. Requiring/storing an adminkey in the agent environment is a disproportionate privilege unless explicitly justified.
⚠ Persistence & Privilege
The skill does not set disableModelInvocation, so the model can invoke it autonomously. Combined with a potentially powerful adminkey stored in the environment, this creates risk that the model could initiate payments or other privileged actions without additional user consent. The SKILL.md requires asking for confirmation before paying, but that is an instruction and not an enforcement mechanism.
如何使用
  1. 确保已安装 OpenClaw（本地或 Docker 部署）
  2. 在对话框中输入安装命令：/install lnbits
  3. 安装完成后，直接呼叫该 Skill 的名称或使用 /lnbits 触发
  4. 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
LNbits version 1.0.0 – Initial Release - Enables wallet management for LNbits Lightning wallets: check balance, pay invoices, create/receive invoices. - Enforces critical security protocols: does not display LNbits secrets and requires explicit user confirmation before sending payments. - Automatically checks wallet balance before any payment attempt. - Provides step-by-step usage instructions for wallet setup, balance checks, receiving, and sending payments. - Summarizes errors clearly without showing raw traces for better user experience.
元数据
Slug lnbits
版本 1.0.0
许可证 —
累计安装 1
当前安装数 1
历史版本数 1
常见问题

LNbits Wallet 是什么？

Manage LNbits Lightning Wallet (Balance, Pay, Invoice). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1756 次。

如何安装 LNbits Wallet？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install lnbits」即可一键安装，无需额外配置。

LNbits Wallet 是免费的吗？

是的，LNbits Wallet 完全免费（开源免费），可自由下载、安装和使用。

LNbits Wallet 支持哪些平台？

LNbits Wallet 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 LNbits Wallet？

由 talvasconcelos（@talvasconcelos）开发并维护，当前版本 v1.0.0。

推荐 Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191115 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 留言讨论