← 返回 Skills 市场
Nova App Builder
作者
Zhengfa Dang
· GitHub ↗
· v2.3.1
· MIT-0
758
总下载
2
收藏
2
当前安装
47
版本数
在 OpenClaw 中安装
/install nova-app-builder
功能描述
Build and deploy Nova Platform apps (TEE apps on Sparsity Nova / sparsity.cloud). Use when a user wants to create a Nova app, write enclave application code,...
安全使用建议
This skill appears to do what it says: scaffold a Nova app and call sparsity.cloud to build/deploy it. Before running: 1) Review the included scaffolded files (enclave/main.py, odyn.py) to ensure endpoints and placeholders are acceptable. 2) Provide only your Nova API key and a GitHub PAT (used for git push); do not supply AWS/S3 credentials or enclaver.yaml as the docs instruct. 3) Consider tightening the egress_allow setting (SKILL defaults to ["**"]) if you want to restrict outbound network access for your app. 4) Test locally in IN_ENCLAVE=false mode first (note: mock Odyn endpoint is external). 5) Watch for the scaffold operation overwriting an existing directory. If you need further assurance, run the scripts in a disposable environment and inspect network calls (or read the code) before using production secrets.
功能分析
Type: OpenClaw Skill
Name: nova-app-builder
Version: 2.3.1
The nova-app-builder skill bundle is a legitimate developer tool designed to scaffold, build, and deploy Trusted Execution Environment (TEE) applications on the Sparsity Nova platform (sparsity.cloud). The bundle includes a project template, a deployment script (scripts/nova_deploy.py), and comprehensive documentation (SKILL.md and references/). While the skill requires sensitive inputs such as a Nova API key and a GitHub Personal Access Token (PAT), these are used strictly for their stated purposes—communicating with the Nova Platform API and pushing code to the user's repository. The code logic is transparent, lacks obfuscation, and contains no evidence of data exfiltration, backdoors, or malicious prompt injection.
能力评估
Purpose & Capability
Name/description (build & deploy Nova apps) match the included assets and scripts: scaffold.py produces a project template; nova_deploy.py calls sparsity.cloud APIs to create/build/deploy apps; enclave client (odyn.py) targets the internal Odyn API. No unrelated credentials or binaries are requested in metadata.
Instruction Scope
SKILL.md and the scripts limit actions to scaffolding local files and calling the Nova Platform APIs. The skill asks the user for a Nova API key and (separately) a GitHub PAT for pushing the repo—these are plausible and documented. Two items to note: (1) the scaffold/advanced default sets egress_allow to ["**"] which is permissive (allows domain egress from the enclave) — this is a functional choice for convenience but broad; (2) in local (mock) mode the Odyn client hits http://odyn.sparsity.cloud:18000, an external mock endpoint (documented as such) — review that behavior before using mock mode.
Install Mechanism
No install spec; the skill is instruction + bundled templates and scripts. All bundled files are included in the skill manifest (no downloads from arbitrary URLs, no extract operations). Scaffold copies included templates to the user's filesystem when run — expected behavior for a generator.
Credentials
The skill metadata requires no environment variables. Runtime instructions and scripts accept a Nova API key and recommend a GitHub PAT for pushes; both are proportionate to the stated purpose. The skill explicitly tells users not to provide Docker/AWS/S3 credentials (the platform manages those). No unexpected secrets or unrelated service credentials are requested.
Persistence & Privilege
The skill is user-invocable, not always-enabled, and does not request persistent system presence or attempt to modify other skills. It does write scaffolded files to the user's target directory when executed — this is normal for a project generator.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install nova-app-builder - 安装完成后，直接呼叫该 Skill 的名称或使用
/nova-app-builder触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.3.1
Add public App Explorer endpoints (by-tee-wallet, by-onchain-id, batch), paid deployment endpoint, and full auth management APIs (wallet login/SIWE, API key CRUD, profile, password, email verification, token refresh) from nova-api update 2026-03-10
v2.3.0
Update for nova-app-template & sparsity-nova-examples March 2026: nova_python_sdk/ package structure (odyn/kms_client/rpc/env modules), new hello-world-tee example, /.well-known/attestation Caddy routing clarification, Primary API (18000) not publicly exposed, new Odyn endpoints (random, sign-tx, kms/kv), IN_ENCLAVE is app-convention not auto-injected, build-attestation.json provenance notes, nova sales deck + resources links, platform architecture doc links
v2.2.2
Add explorer link (https://sparsity.cloud/explore/{onchain_app_id}) after on-chain registration
v2.2.1
Fix: strip trailing slash from instance_url to prevent double-slash in curl output
v2.2.0
Improve output (emojis, state transitions); fix URL from deployments[0].enclave_info.instance_url; add --dry-run; better error hints; GitHub PAT docs; /api/info endpoint in template
v2.1.3
Fix: read app URL from enclave_info.instance_url (fallback: hostname) via GET /apps/{sqid}/detail
v2.1.2
SKILL.md review: fix portal step numbering; api/app-wallet note; correct kms/wallet advanced field names; Step 6 references nova_deploy.py --onchain
v2.1.1
Fix: Dockerfile.template -> Dockerfile.txt in SKILL.md note
v2.1.0
nova_deploy.py: prompt user for on-chain registration after deploy; add --onchain / --no-onchain flags; implement full 6a-6d on-chain flow
v2.0.5
Add update reminder at top; fix Common Issues entries for old-version symptoms (enclaver.yaml, config.py, console.sparsity.cloud)
v2.0.4
Fix: Dockerfile.txt now correctly packaged by clawhub (was Dockerfile.template which is not whitelisted)
v2.0.3
Use Dockerfile.template instead of inline generation; cleaner and more maintainable
v2.0.2
Doc: explain Dockerfile missing issue and workaround; add to Common Issues
v2.0.1
Fix: attestation endpoint returns raw CBOR bytes; fix Step 6 comment numbering
v2.0.0
Full rewrite: correct steps, no enclaver.yaml, Dockerfile inline
v1.5.1
Fix step numbering; remove duplicate step titles; all local tests passing
v1.5.0
Fix ownership; clean publish under correct account
v1.4.9
Remove all enclaver.yaml references; repo needs only Dockerfile + app code, advanced field handles the rest
v1.4.8
Remove enclaver.yaml references; all config via advanced field at app creation
v1.4.7
debug
元数据
常见问题
Nova App Builder 是什么？
Build and deploy Nova Platform apps (TEE apps on Sparsity Nova / sparsity.cloud). Use when a user wants to create a Nova app, write enclave application code,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 758 次。
如何安装 Nova App Builder？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install nova-app-builder」即可一键安装，无需额外配置。
Nova App Builder 是免费的吗？
是的，Nova App Builder 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Nova App Builder 支持哪些平台？
Nova App Builder 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Nova App Builder？
由 Zhengfa Dang（@zfdang）开发并维护，当前版本 v2.3.1。
推荐 Skills