← 返回 Skills 市场
synthluvr

Nova

作者 SynthLuvr · GitHub ↗ · v1.0.2
cross-platform ✓ 安全检测通过
524
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install nova
功能描述
Safely operate the nova CLI wallet for authentication, balance checks, sending funds, withdrawals, and key management across mainnet and testnet. Enforces de...
安全使用建议
This skill appears to be what it claims: a set of safe, deterministic instructions for operating the nova CLI. Before installing or running it, verify the npm package and GitHub repository (author, recent releases, and trustworthiness). Prefer 'npx @mynthai/nova' to avoid a global install if you don't trust the package, and always use '--dry-run' and explicit user confirmation for any 'send' or 'withdraw' actions. Do not paste claim URLs, exported keys, or mnemonic phrases into shared chats or logs. If you need higher assurance, inspect the @mynthai/nova package source on GitHub/npm before allowing the agent to install or execute it.
功能分析
Type: OpenClaw Skill Name: nova Version: 1.0.2 The OpenClaw AgentSkills skill bundle for 'nova-wallet' is classified as benign. While the underlying `nova` CLI performs inherently high-risk operations like sending funds and managing cryptographic keys, the skill's documentation (SKILL.md and references/REFERENCE.md) provides extensive and explicit instructions for the AI agent to operate safely. These instructions emphasize user confirmation for financial transactions, strict handling of secrets (keys, phrases, claim URLs), validation of outputs, and warnings against common pitfalls like blind retries or logging sensitive data. There is no evidence of malicious intent, data exfiltration, unauthorized execution, persistence mechanisms, or prompt injection designed to bypass security or harm the user; instead, the instructions actively promote secure and responsible agent behavior.
能力评估
Purpose & Capability
The name/description (operate the nova CLI wallet) match the SKILL.md guidance. Required runtime (Node.js 24 and the @mynthai/nova npm package or npx) is coherent for a Node-based CLI wrapper. There are no unrelated environment variables, binaries, or config paths requested.
Instruction Scope
SKILL.md is narrowly scoped to deterministic parsing, network checks, balance checks, send/withdraw flows, and secret-handling guidance. It does not instruct the agent to read unrelated files, harvest environment variables, or transmit data to unexpected endpoints. It explicitly warns to treat claim links and keys as secrets.
Install Mechanism
There is no registry install spec, but the runtime instructions tell the agent to run 'npm install @mynthai/nova' or use 'npx'. Installing/executing a third-party npm package is a normal way to get a CLI, but it does write and execute code from the public npm registry — verify the package and maintainer before allowing installation. Minor inconsistency: registry metadata lists no homepage/source while SKILL.md includes GitHub and npm URLs.
Credentials
The skill requests no environment variables or credentials. Instructions reference only nova's own config (e.g., 'nova config get network'), which is proportional to the wallet management purpose. Secret-handling rules are sensible and do not request unrelated secrets.
Persistence & Privilege
always is false and the skill is instruction-only, so it does not request permanent automatic inclusion or elevated platform privileges. The guidance to use npm/npx does not itself alter platform configuration (other than potential local/global package installation if the user chooses '-g').
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install nova
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /nova 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
- Added `--dry-run` (`-d`) option to both `nova send` and `nova withdraw` commands for validating and previewing transactions without submitting. - Updated command documentation to reflect new `--dry-run` usage and behavior. - Clarified that `send` is still non-idempotent, but now supports safe pre-checks with `--dry-run`. - No changes to code files; documentation only update.
v1.0.1
- Fixed references to @mynthai/nova package - Now includes metadata links for project homepage and npm package
v1.0.0
Initial release of nova-wallet skill for safe and automated CLI wallet operations. - Enables authentication, balance checks, fund transfers, withdrawals, and key management via the nova CLI. - Enforces deterministic structured output parsing, exit code checks, and robust error handling. - Implements strict verification for network/amount/destination before any financial action. - Includes clear safety rules for secret handling, non-idempotent send operations, and claim links. - Documents supported networks, stablecoins, output formats, fees, rate limits, and all command usages.
元数据
Slug nova
版本 1.0.2
许可证
累计安装 0
当前安装数 0
历史版本数 3
常见问题

Nova 是什么?

Safely operate the nova CLI wallet for authentication, balance checks, sending funds, withdrawals, and key management across mainnet and testnet. Enforces de... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 524 次。

如何安装 Nova?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install nova」即可一键安装,无需额外配置。

Nova 是免费的吗?

是的,Nova 完全免费(开源免费),可自由下载、安装和使用。

Nova 支持哪些平台?

Nova 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Nova?

由 SynthLuvr(@synthluvr)开发并维护,当前版本 v1.0.2。

💬 留言讨论