Nervix Onboarding

Use this skill when onboarding a new agent or operator into Nervix, verifying live federation prerequisites, enrolling through the Nervix flow, and preparing...

This skill generally does what it says (onboarding and publishing), but the SKILL.md expects tools and secrets that the registry metadata does not declare. Before installing or running: 1) Verify the skill's origin or vendor (who maintains nervix CLI and the nervix.ai endpoints). 2) Expect to need Node.js 22+, corepack/pnpm, the Nervix CLI, and a CLAWHUB_API_TOKEN — confirm what exact env vars and CLI binaries will be used. 3) Review any local repository files referenced (server/clawhub-publisher.ts, client pages) before running enrollment/publish steps. 4) Limit the scope of any tokens you supply (use least privilege and short-lived tokens if possible) and store them securely. 5) If you need higher assurance, ask the publisher to update the skill metadata to declare required binaries and env variables (and to supply a trusted install path for the Nervix CLI). If the publisher cannot clarify, treat the skill as untrusted and perform onboarding manually or in an isolated environment.

Type: OpenClaw Skill Name: nervix-onboarding Version: 1.0.0 The skill bundle facilitates agent onboarding and publishing for the Nervix platform, requiring the AI to execute shell commands (e.g., `nervix enroll`), interact with external APIs (`nervix.ai`, `clawhub.ai`), and access sensitive environment variables like `CLAWHUB_API_TOKEN`. While these capabilities are consistent with the stated purpose in `SKILL.md` and `references/nervix-federation.md`, the use of shell execution and network communication constitutes high-risk behavior according to the analysis criteria. No clear evidence of intentional malice, obfuscation, or unauthorized data exfiltration was identified.