← 返回 Skills 市场
mikeargento

Prethereum

作者 Mike · GitHub ↗ · v0.3.0
cross-platform ✓ 安全检测通过
289
总下载
0
收藏
0
当前安装
5
版本数
在 OpenClaw 中安装
/install prethereum
功能描述
Verifiable proofs for any computation. Ed25519 over SHA-256. TEE-backed signing, offline verification.
安全使用建议
This skill appears coherent with its stated purpose, but before installing: 1) Confirm what notary endpoint will be used (SKILL.md provides an optional OCC_NOTARY_URL but no default endpoint is documented); do not point commits at an untrusted server. 2) Never send secrets or private keys — the docs explicitly warn this. 3) Verify and pin the notary/attestor public key and/or validate Nitro attestation out-of-band before trusting proofs; the repo/spec mention attestation but don't detail a trust-bootstrapping procedure. 4) Inspect the npm packages (npm pack && tar -xzf) and the @prethereum/mcp package before installing, especially if you will run the MCP server globally. 5) If you need offline verification guarantees, test the verify flow locally and confirm the proof contains the expected public key/attestation fields. 6) Because the skill is instruction-only and can be invoked autonomously by agents, restrict agent permissions or confirm prompts before allowing it to send bytes to the notary.
功能分析
Type: OpenClaw Skill Name: prethereum Version: 0.3.0 The skill bundle contains metadata and documentation for 'Prethereum,' a tool designed for generating verifiable proofs using AWS Nitro Enclaves (TEEs). The documentation (SKILL.md and protocol.md) describes a legitimate cryptographic workflow involving SHA-256 hashing and Ed25519 signing, with clear distinctions between network-dependent 'commit' operations and offline 'verify' operations. No executable code is included in the bundle, and the instructions for the AI agent are transparent, including explicit warnings against committing sensitive secrets and instructions for users to inspect npm packages before installation.
能力评估
Purpose & Capability
Name/description (verifiable computation, Ed25519 over SHA-256, TEE-backed signing) align with the SKILL.md: it requires Node/npm and describes commit/verify/health operations plus npm packages. Nothing requested (no env creds, no system paths) is inconsistent with that purpose.
Instruction Scope
SKILL.md limits network activity to commit (HTTPS to notary) and optional health check; verify is offline. It cautions not to send secrets. However, operational details are underspecified: the default notary URL is not documented here (OCC_NOTARY_URL is optional), and the spec does not describe how to bootstrap trust in the notary/public key or how to validate Nitro attestation in practice. The examples (curl --data-binary @output.json) show sending a local file — correct for intended use, but users must take care not to send unintended files or secrets.
Install Mechanism
This is an instruction-only skill. It suggests installing via npm (a standard registry); no install scripts are embedded in the skill bundle and no remote arbitrary downloads or extracts are invoked by the SKILL.md. Risk from installation comes from the npm packages themselves (inspect before installing), but the skill's manifest does not perform installs automatically.
Credentials
No required environment variables or credentials are declared. The optional OCC_NOTARY_URL is reasonable for overriding the notary endpoint. No unrelated secrets or config paths are requested.
Persistence & Privilege
always is false. The skill does not request persistent presence or system-wide configuration changes. Autonomous invocation is allowed (platform default) but there is no evidence of privileged actions that would amplify that risk.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install prethereum
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /prethereum 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.3.0
Remove all npx -y references, remove MCP config modification instructions, clarify commit only reads user-provided files
v0.2.1
Shorten registry description to fit card preview
v0.2.0
Security-first rewrite: add Security Model, pin npm versions, remove auto config modification, clarify network behavior, add installation safety guidance
v0.1.1
Add requirements, network behavior, and config path declarations to address security scan
v0.1.0
Initial release of Prethereum – verifiable cryptographic proofs for computation. - Commit any output, file, or dataset and generate a self-contained Ed25519 signature over a SHA-256 digest. - Offline proof verification—no API key or third party required. - MCP server provides agent tools: commit_text, commit_file, verify_proof, and health check. - Includes core npm package, AWS Nitro Enclaves adapter, CLI, and builder kit. - Easy local server deployment and detailed setup guides for integration.
元数据
Slug prethereum
版本 0.3.0
许可证
累计安装 0
当前安装数 0
历史版本数 5
常见问题

Prethereum 是什么?

Verifiable proofs for any computation. Ed25519 over SHA-256. TEE-backed signing, offline verification. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 289 次。

如何安装 Prethereum?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install prethereum」即可一键安装,无需额外配置。

Prethereum 是免费的吗?

是的,Prethereum 完全免费(开源免费),可自由下载、安装和使用。

Prethereum 支持哪些平台?

Prethereum 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Prethereum?

由 Mike(@mikeargento)开发并维护,当前版本 v0.3.0。

💬 留言讨论