← 返回 Skills 市场
742
总下载
1
收藏
0
当前安装
10
版本数
在 OpenClaw 中安装
/install nihao
功能描述
Nostr identity setup and health-check CLI. Creates a complete Nostr identity (keypair, profile, relay list, lightning address, Cashu wallet) in one command....
安全使用建议
This skill appears to do what it says (build a Nostr CLI and create/check identities). Things to consider before installing: 1) go install pulls and builds upstream source—review or pin the GitHub repo/commit if you require stronger supply-chain guarantees; 2) by default the tool may emit the secret key (nsec) to stdout/JSON — ensure agent logs do not leak stdout, or use --nsec-file (0600) or --nsec-cmd to store the secret in a secure local password store; 3) avoid passing secrets on the command line (the SKILL.md also warns about this); 4) run the build/install in a controlled environment if you don't trust the remote code; and 5) if you need higher assurance, audit the repository code and its dependencies before compiling.
功能分析
Type: OpenClaw Skill
Name: nihao
Version: 0.12.3
The 'nihao' skill is a Nostr identity management utility that allows an agent to generate keypairs, set up profiles, and perform health checks. It installs via 'go install' from a public GitHub repository (github.com/dergigi/nihao) and provides clear instructions for the agent to handle private keys securely using file permissions (0600) and non-interactive flags. No evidence of data exfiltration, malicious execution, or prompt injection was found; the tool's capabilities and instructions are entirely consistent with its stated purpose.
能力评估
Purpose & Capability
The name/description align with the declared capabilities (keypair generation, publishing Nostr events, relay probes, LNURL/Cashu interactions). No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md instructs the agent to fetch and locally compile the nihao Go tool and to run it to generate/publish identities and perform health checks. The instructions explicitly surface secret handling: by default nsec may be printed to stdout (or can be written to a file or piped to a command). This is expected for an identity CLI but means the agent must avoid exposing stdout to untrusted logs and must use --nsec-file/--nsec-cmd or stdin to protect secrets.
Install Mechanism
No prebuilt binaries; install uses 'go install github.com/dergigi/nihao@latest' which fetches source from GitHub and compiles locally. This is a common pattern but still executes third-party code (and its dependencies) on the host—moderate trust required. No arbitrary archive downloads or personal servers are used.
Credentials
The skill requests no environment variables or external credentials. Its options for persisting secrets (file or piping to a command) are appropriate for the purpose; however those mechanisms can be misused to expose secrets if the operator is careless.
Persistence & Privilege
always:false and default invocation privileges are appropriate. The skill does not request persistent system-wide configuration or cross-skill access. It will write a secret file only if the installer/agent uses the --nsec-file flag.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install nihao - 安装完成后，直接呼叫该 Skill 的名称或使用
/nihao触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.12.3
Updated skill documentation to reflect nip17.com DM relay defaults
v0.12.2
- Updated installation instructions and prerequisites for clarity: now emphasizes Go 1.21+ is required and installation is always from source using the Go toolchain.
- Stronger guidance on secure key handling: recommends using --nsec-file or --nsec-cmd to persist sensitive keys, discourages passing secrets as command-line arguments.
- Enhanced explanation of key management options, including security notes about process listings and shell history.
- General rewording and expansion for improved clarity and actionable guidance during install and setup.
v0.12.1
nihao 0.12.1
- No user-facing changes detected in this release.
- Documentation, behavior, and interface remain consistent with the previous version.
v0.12.0
Add --nsec-file for AV-friendly key storage, --nsec-exec alias for --nsec-cmd, SKILL.md recommends --nsec-file as default
v0.11.4
Sync with repo v0.11.4: backup command, custom relays, NIP-05 input, connection pooling, unknown flag detection, bare relay marker fix
v0.3.0
NIP-65 relay markers, kind 10050 DM relays, relay quality analysis, connection pooling, rate limiting
v0.2.0
Rewrite description — self-sovereign identity and unstoppable money in one command
v0.1.2
Remove shell examples from SKILL.md to clear moderation flag
v0.1.1
Simplified shell examples to avoid security flags
v0.1.0
Initial release — Nostr identity setup & health-check skill for the nihao CLI
元数据
常见问题
Skill 是什么？
Nostr identity setup and health-check CLI. Creates a complete Nostr identity (keypair, profile, relay list, lightning address, Cashu wallet) in one command.... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 742 次。
如何安装 Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install nihao」即可一键安装，无需额外配置。
Skill 是免费的吗？
是的，Skill 完全免费（开源免费），可自由下载、安装和使用。
Skill 支持哪些平台？
Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Skill？
由 dergigi（@dergigi）开发并维护，当前版本 v0.12.3。
推荐 Skills