← 返回 Skills 市场
1622
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install quantum-forge
功能描述
Decentralized AI platform using simulated quantum algorithms on Nostr for real-time swarm collaboration, tokenized compute exchange, and multi-chain AI asset...
安全使用建议
This skill is inconsistent and potentially risky. Before installing or running it: 1) Do not export or use a private key (NOSTR_PRIVATE_KEY) until you have audited the code — the SKILL.md even shows an incorrect example that could leak keys. 2) Verify the GitHub repo (https://github.com/quantumforge/quantumforge.git) exists, inspect its code, and ensure dependencies and init scripts are safe; do not run npm/pip installs blindly. 3) Treat the relay domain (wss://relay.quantumforge.org) as untrusted until you can confirm ownership and behavior; publishing events there could leak identity or keys. 4) Expect additional undisclosed credentials for minting/zaps (wallet/private keys); require explicit listing and least-privilege tokens, not full private keys. 5) If you want to test, do so in an isolated environment with ephemeral keys and read-only configurations. 6) Prefer to see the skill include an explicit install spec, declared required env vars, and a clear privacy/security section; absence of those is a red flag. If you cannot review the external repo and init scripts yourself, avoid installing or running this skill.
功能分析
Type: OpenClaw Skill
Name:
Developer:
Version:
Description: OpenClaw Agent Skill
The skill bundle is classified as suspicious due to its reliance on external dependencies and the handling of sensitive information. The `SKILL.md` instructs the agent to `git clone` a repository and run `npm install` or `pip install -r requirements.txt`, which introduces supply chain risks if the specified GitHub repository or its dependencies are compromised. Additionally, it requires setting `NOSTR_PRIVATE_KEY` as an environment variable, which, while necessary for its stated purpose, is a sensitive operation. There is no clear evidence of intentional malicious behavior like data exfiltration or unauthorized remote control, but the inherent risks associated with these operations elevate it beyond benign.
能力评估
Purpose & Capability
The SKILL.md describes a large decentralized quantum/blockchain system and instructs cloning a GitHub repo and installing Node/Python dependencies, but the registry metadata declares no code, no install spec, and no required env vars. The manifest and metadata do not align with the heavy capabilities described (multi-chain minting, cash zaps, network relays). The instructions also rely on external services (relay.quantumforge.org, GitHub repo) that are not validated or declared in the registry metadata.
Instruction Scope
The runtime instructions tell the agent to: git clone an external repository, run npm/pip installs, export a NOSTR_PRIVATE_KEY and RELAY_URL environment variables, initialize and bootstrap into a swarm, publish events to relays, and perform zaps/minting. These are network- and key-sensitive operations that go beyond a simple instruction-only skill. The JS example wrongly uses the private-key env var as the event 'pubkey' (which could leak a private key if used as-is). The instructions implicitly require crypto wallet operations (minting, zaps) but do not declare or justify the needed credentials. Overall the instructions ask the agent to read/set/transmit secrets and to perform network actions not represented in the declared requirements.
Install Mechanism
There is no declared install spec in the registry, but SKILL.md instructs cloning https://github.com/quantumforge/quantumforge.git and running npm/pip installs and init scripts. Downloading and executing code from an external GitHub repo is an implicit install mechanism and introduces risk because the repository and its contents are not included in the package, not pinned, and not validated. The relay URL is a project-owned domain (wss://relay.quantumforge.org) rather than a well-known public endpoint; that increases trust burden.
Credentials
Declared requirements list no env vars or credentials, yet SKILL.md explicitly requires NOSTR_PRIVATE_KEY and RELAY_URL and implies further crypto keys for multi-chain minting and zaps. Requiring a private key in an environment variable is sensitive and should be declared and justified. The mismatch between declared and required credentials is disproportionate and risky. The example code also mishandles keys (using a private key as the pubkey), increasing the chance of accidental key exposure.
Persistence & Privilege
The skill does not request always:true and is user-invocable (normal). It enables autonomous invocation by default (disable-model-invocation: false), which is standard, but combined with the above concerns (network commands, key usage, external code execution) means an autonomously-invoked agent could perform network actions and transactions. The skill does not request modifying other skill configs or system-wide settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install quantum-forge - 安装完成后，直接呼叫该 Skill 的名称或使用
/quantum-forge触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
QuantumForge 1.0.0 – Initial Release
- Launches a decentralized AI orchestration platform powered by the Nostr protocol.
- Introduces quantum-enhanced model forging, decentralized swarm intelligence, and tokenized compute exchange.
- Enables multi-chain asset minting and seamless integration with Ethereum, Bitcoin, and other chains.
- Implements robust privacy with zero-knowledge proofs, homomorphic encryption, and sharding.
- Provides a modular architecture for swarm collaboration, agent autonomy, and DAO-driven protocol evolution.
- Supplies instant onboarding, agent scripting (Node.js/Python), and comprehensive developer documentation.
元数据
常见问题
QuantumForge 是什么？
Decentralized AI platform using simulated quantum algorithms on Nostr for real-time swarm collaboration, tokenized compute exchange, and multi-chain AI asset... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1622 次。
如何安装 QuantumForge？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install quantum-forge」即可一键安装，无需额外配置。
QuantumForge 是免费的吗？
是的，QuantumForge 完全免费（开源免费），可自由下载、安装和使用。
QuantumForge 支持哪些平台？
QuantumForge 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 QuantumForge？
由 KOSASIH（@kosasih）开发并维护，当前版本 v1.0.0。
推荐 Skills