← 返回 Skills 市场
79
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install nimmit-onboarding
功能描述
Use when a new user messages the bot for the first time or sends /start. Guides them through conversational onboarding — organization setup, industry, langua...
安全使用建议
This skill appears to do what it says (conversational onboarding) but its runtime steps will modify your workspace and system (write files, copy/install 'skill packs', and create a cron job) without specifying where those skill packs come from or asking for explicit consent. Before installing or enabling this skill: 1) Ask the publisher to list exactly which skill packs will be installed and their sources (URLs, registry names, or repository release tags). 2) Require that installs perform cryptographic verification or come from a trusted registry. 3) Restrict or review any exec/copy operations and cron changes in a sandbox environment first. 4) Ensure you have an allowlist for which users can trigger onboarding and a way to review/rollback changes to IDENTITY.md, SOUL.md, HEARTBEAT.md, TASKS.md and crontab. 5) If you cannot verify the provenance of skill packs or want tighter control, do not enable automated installation/scheduling and require manual approval for setup steps. If you want more certainty, ask the skill author for an explicit install plan or provide the list of skill packs here for review.
功能分析
Type: OpenClaw Skill
Name: nimmit-onboarding
Version: 1.0.0
The nimmit-onboarding skill bundle automates the configuration of the OpenClaw agent by modifying core system files (IDENTITY.md, SOUL.md) and utilizing high-risk capabilities such as 'exec' for installing skill packs and 'cron' for establishing persistence (daily briefings). While these actions are aligned with the stated purpose of user onboarding, the instructions to execute technical steps silently and the use of powerful system-level tools without explicit user confirmation for each command pose a significant security risk.
能力评估
Purpose & Capability
The stated purpose (conversational onboarding via Telegram) aligns with creating org/profile files (IDENTITY.md, TASKS.md) and scheduling briefings. However, instructions to 'install the matching skill pack(s)' and to use exec/copy to manipulate skill packs are more powerful than a simple chat flow and should be justified by the author (where do skill packs come from, which ones, from what source?).
Instruction Scope
SKILL.md explicitly instructs the agent to use write to update workspace files, use exec to copy/install skill packs, and use cron to schedule daily briefings. These actions read and modify persistent workspace state and system scheduling. The instructions do not constrain the source of skill packs, do not require explicit user consent for installation, and say to perform setup 'silently' (no technical details to user), which increases risk of unreviewed changes.
Install Mechanism
There is no install spec in the registry, but the runtime instructions tell the agent to install/copy skill packs via exec. Because provenance and installation steps are unspecified, this could lead to installing arbitrary code or untrusted packages. The manifest gives no safe source or verification for any install.
Credentials
The skill requests no environment variables, credentials, or external config paths in the manifest. It operates on workspace files (IDENTITY.md, SOUL.md, etc.), which is proportionate to onboarding. No unrelated secrets are requested.
Persistence & Privilege
Although always:false and user-invocable:true (good), the skill instructs creating a cron job to send daily briefings and to install skill packs, which grants it persistent behavior and ongoing side effects. The skill would modify system scheduling and workspace contents without details on approvals or rollback.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install nimmit-onboarding - 安装完成后，直接呼叫该 Skill 的名称或使用
/nimmit-onboarding触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
nimmit-onboarding 1.0.0
- Initial release of conversational onboarding for new Nimmit users via Telegram chat.
- Guides first-time users through organization setup, industry selection, language preference, team size, and top priorities—no technical steps required.
- Fully chat-based: never asks users to run commands or open a terminal.
- Handles edge cases such as users with existing setups and Khmer language support.
- Automates workspace file updates, skill pack installation, and daily morning briefing scheduling behind the scenes.
元数据
常见问题
Nimmit Onboarding 是什么？
Use when a new user messages the bot for the first time or sends /start. Guides them through conversational onboarding — organization setup, industry, langua... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 79 次。
如何安装 Nimmit Onboarding？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install nimmit-onboarding」即可一键安装，无需额外配置。
Nimmit Onboarding 是免费的吗？
是的，Nimmit Onboarding 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Nimmit Onboarding 支持哪些平台？
Nimmit Onboarding 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Nimmit Onboarding？
由 rithythul（@rithythul）开发并维护，当前版本 v1.0.0。
推荐 Skills