← 返回 Skills 市场
313
总下载
0
收藏
0
当前安装
5
版本数
在 OpenClaw 中安装
/install nostrwalletconnect
功能描述
Financial capability for AI entities — pay Lightning invoices, check balance, create invoices via Nostr Wallet Connect (NIP-47).
安全使用建议
This skill appears coherent for enabling Lightning payments via Nostr Wallet Connect, but treat the NWC connection string as a high-value secret — anyone with it can authorize payments. Before installing: 1) Verify the pip package name and publisher on PyPI and the linked GitHub repo to ensure you are installing the intended project; 2) Use a wallet/account with limited funds or scoped permissions for AI-operated keys; 3) Confirm whether NOSTRKEY_PASSPHRASE is required in your deployment (metadata vs registry summary mismatch); 4) Review the package dependencies (nostrkey and others) for supply-chain risk; 5) Audit any automated/autonomous agent use of this skill — if the agent will pay invoices automatically, enforce policy and rate limits to avoid unintended spending.
功能分析
Type: OpenClaw Skill
Name: nostrwalletconnect
Version: 0.1.4
The nostrwalletconnect skill bundle provides legitimate financial capabilities for AI agents to interact with the Lightning Network via the NIP-47 protocol. The documentation (SKILL.md) and example scripts (examples/check_balance.py, etc.) align with the stated purpose of managing invoices and balances. While the skill handles highly sensitive credentials like NWC_CONNECTION_STRING, the files include appropriate security warnings and lack any evidence of malicious intent, data exfiltration, or prompt injection.
能力评估
Purpose & Capability
Name/description (Nostr Wallet Connect for Lightning payments) match the behavior and requirements: the skill needs a NWC connection string and provides methods to check balance, pay invoices, create invoices, and list transactions. The examples and API usage align with the stated purpose.
Instruction Scope
SKILL.md instructs the agent to read a single secret environment variable (NWC_CONNECTION_STRING) and use the nostrwalletconnect client API. The instructions do not reference unrelated system files or external endpoints beyond Nostr relays and expected wallet interaction. Minor scope note: SKILL.md refers to installing/using the NostrKey skill for identity, and metadata also references a passphrase env var (NOSTRKEY_PASSPHRASE) — this is plausible but should be confirmed as required only by the nostrkey dependency.
Install Mechanism
Install uses a pip package named 'nostrwalletconnect' (declared in metadata and SKILL.md). This is a standard package installation mechanism (moderate risk inherent to installing third-party packages). The homepage and repository point to GitHub rather than an arbitrary URL, which is appropriate. No archive downloads from untrusted hosts were found.
Credentials
The skill legitimately requires a sensitive NWC connection string (NWC_CONNECTION_STRING) that contains wallet pubkey, relay, and secret — this is necessary for the functionality and is appropriately marked sensitive in metadata. Metadata also lists an optional NOSTRKEY_PASSPHRASE for the nostrkey dependency, which is plausible. There is a minor inconsistency: the registry summary at the top of the package data claimed 'Required env vars: none' while metadata.json declares NWC_CONNECTION_STRING as required; this is likely a metadata mismatch and should be clarified before deployment.
Persistence & Privilege
'always' is false (no forced inclusion), the skill does not request system-wide config changes or access to other skills' credentials, and it does not demand persistent elevated privileges. Autonomous invocation is allowed (platform default) but is not combined with other worrying privileges.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install nostrwalletconnect - 安装完成后,直接呼叫该 Skill 的名称或使用
/nostrwalletconnect触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.4
Security hardening: SecretStr, sanitized exceptions, input validation
v0.1.3
Entity-aware SKILL.md — financial capability as a dimension of being
v0.1.2
Standardized SKILL.md template
v0.1.1
Security hardening: secret key redaction, hex validation in URI parser, JSON response validation, payment parameter validation
v0.1.0
Initial release — NIP-47 Nostr Wallet Connect SDK for OpenClaw AI entities
元数据
常见问题
nostrwalletconnect 是什么?
Financial capability for AI entities — pay Lightning invoices, check balance, create invoices via Nostr Wallet Connect (NIP-47). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 313 次。
如何安装 nostrwalletconnect?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install nostrwalletconnect」即可一键安装,无需额外配置。
nostrwalletconnect 是免费的吗?
是的,nostrwalletconnect 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
nostrwalletconnect 支持哪些平台?
nostrwalletconnect 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 nostrwalletconnect?
由 vveerrgg(@vveerrgg)开发并维护,当前版本 v0.1.4。
推荐 Skills