nostrcalendar

Time awareness for sovereign entities — manage availability, book meetings, negotiate schedules over Nostr relays

This skill implements a Nostr-based calendar and legitimately needs a Nostr private key (NOSTR_NSEC) to sign events. Before installing: (1) confirm the package source — metadata suggests pip, but the install spec shows an unexpected "uv" kind; prefer installing from a trusted index or inspect the package contents first; (2) understand that providing NOSTR_NSEC gives the skill the ability to sign events as that entity (use an entity-specific key, not your personal/high-privilege key); (3) review the nostrcalendar package and its dependency nostrkey on the linked repository or PyPI for unexpected network endpoints or code that stores/transmits your private key; (4) consider using a dedicated entity key or a test identity first, and limit autonomous invocation if you do not want the agent to act with that key without confirmation. The main issues are metadata/install inconsistencies and the runtime pip install instruction — these are not necessarily malicious, but verify before proceeding.

Type: OpenClaw Skill Name: nostrcalendar Version: 0.2.3 The nostrcalendar skill provides a legitimate implementation of Nostr-based scheduling and availability management following NIP-52. While it handles the sensitive NOSTR_NSEC environment variable, this is required for its stated purpose of signing Nostr events. The code in SKILL.md and the provided examples (agent_negotiation.py, book_meeting.py) demonstrate standard usage of the nostrcalendar and nostrkey libraries without any signs of malicious intent, data exfiltration, or unauthorized execution.