← 返回 Skills 市场
110
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install nimo-glasses
功能描述
Connect AI smart glasses to OpenClaw via Companion App. Provides secure linkCode pairing, chat API, and SSE streaming for voice-controlled AI conversations t...
安全使用建议
This package implements what it claims (local pairing, chat endpoint, SSE) and the code is readable, but exercise caution before running the included deploy.sh or enabling it unmodified. Recommended steps:
- Don't run deploy.sh as-is. Inspect and run its commands manually so you understand each change.
- Do NOT accept the default GATEWAY_TOKEN; set a strong token or rely on your gateway's existing auth. The script's default (nimo-demo-2026) is weak and could expose your gateway.
- Avoid binding the gateway to 'lan' or opening it to external networks unless you intentionally want that; keep it localhost-only if possible, or firewall/limit access to trusted IPs.
- Review and (if necessary) remove/limit code paths that accept link codes or tokens if you plan to expose the gateway beyond your LAN.
- Be aware that the plugin can set a systemPrompt that changes assistant behavior; do not allow untrusted parties to control that prompt (it can be used to manipulate responses or influence models).
- If you want this plugin, prefer copying only the index.ts into your trusted plugin directory and enable it manually, rather than running the script which modifies global settings.
If you want further help: tell me whether you plan to run the plugin on a private LAN/localhost-only machine or on a publicly reachable server, and I can provide concrete configuration edits and a safer installation checklist.
功能分析
Type: OpenClaw Skill
Name: nimo-glasses
Version: 0.1.0
The nimo-glasses plugin is a legitimate extension designed to connect smart glasses to the OpenClaw gateway. It implements a documented pairing mechanism using a rotating 6-digit link code and session tokens to proxy voice-to-text requests to the local AI agent. Analysis of index.ts and deploy.sh shows no evidence of data exfiltration, malicious execution, or unauthorized access; all network communication is restricted to the local gateway or the authenticated companion app.
能力评估
Purpose & Capability
The name/description align with the included code: index.ts implements link-code pairing, session tokens, /nimo/* routes and internal calls to http://localhost:{port}/v1/chat/completions. The deploy.sh and README also request model API keys (optional) to configure the gateway — this is reasonable for routing requests to a model, but the metadata claims no required env vars while the scripts read/set OPENAI/GEMINI keys and gateway token, which is inconsistent and worth noting.
Instruction Scope
SKILL.md / README describe local-only flow and sensible endpoints. However deploy.sh performs system-wide actions: it may clear ~/.openclaw, sets gateway.bind to 'lan', enables HTTP endpoints, installs/updates openclaw globally, copies plugin files into ~/.openclaw/extensions, and sets a default GATEWAY_TOKEN. Binding the gateway to LAN and installing a weak default token (nimo-demo-2026) increases the risk of unintended network exposure. The SKILL.md also exposes and encourages setting a systemPrompt (able to override assistant behavior)—the pre-scan flagged a 'system-prompt-override' pattern which could be abused if not handled carefully.
Install Mechanism
There is no formal install spec in registry metadata (instruction-only), but a deploy.sh is included. The script uses npm install -g openclaw (a known registry) and copies local files into the user's OpenClaw extensions directory. There are no downloads from unknown hosts or archive extraction, which reduces risk compared to arbitrary remote fetches, but executing the script will modify user configuration and install global packages.
Credentials
The plugin itself requires no declared env vars, and runtime code mostly uses local endpoints. However deploy.sh expects/sets OPENAI_API_KEY or GEMINI_API_KEY and writes them into OpenClaw config, and it sets a default GATEWAY_TOKEN value. Requesting model API keys is proportionate for routing to models, but the default weak gateway token and automated insertion into gateway config are disproportionate and risky. The plugin also reads process.env.OPENCLAW_AGENT_ID and OPENCLAW_GATEWAY_PORT (not declared), which could be surprising.
Persistence & Privilege
The plugin does not request 'always: true' and is user-invocable. But deploy.sh and README direct changes to global OpenClaw configuration (plugins.allow, plugins.entries.*, gateway.bind, gateway.auth.token, env.*). That modifies system-wide gateway settings and can expose the gateway to the LAN/internet if misconfigured. This level of configuration change is within a plugin installer’s remit but should be treated as privileged and not done without user review.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install nimo-glasses - 安装完成后，直接呼叫该 Skill 的名称或使用
/nimo-glasses触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release: linkCode pairing, chat API, SSE streaming, 60-day token
元数据
常见问题
Nimo AI Glasses 是什么？
Connect AI smart glasses to OpenClaw via Companion App. Provides secure linkCode pairing, chat API, and SSE streaming for voice-controlled AI conversations t... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 110 次。
如何安装 Nimo AI Glasses？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install nimo-glasses」即可一键安装，无需额外配置。
Nimo AI Glasses 是免费的吗？
是的，Nimo AI Glasses 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Nimo AI Glasses 支持哪些平台？
Nimo AI Glasses 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Nimo AI Glasses？
由 orideclaw（@orideclaw）开发并维护，当前版本 v0.1.0。
推荐 Skills