← 返回 Skills 市场
1380
总下载
1
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install stegstr
功能描述
Decode and embed Stegstr payloads in PNG images. Use when the user needs to extract hidden Nostr data from a Stegstr image, encode a payload into a cover PNG, or work with steganographic social networking (Nostr-in-images). Supports CLI (stegstr-cli decode, detect, embed, post) for scripts and AI agents.
安全使用建议
This skill is internally consistent with its stated purpose, but follow these precautions before installing or running it: 1) Verify the GitHub repo (https://github.com/brunkstr/Stegstr) and the project source before building; 2) Don't set STEGSTR_REPO_URL to an untrusted location—only override the repo if you trust the target; 3) Be careful with private keys: do not paste secret keys into command lines or public shells unless you understand the risk; prefer using ephemeral/sandboxed environments when building and testing unknown binaries; 4) If you need to run this in a high-security environment, review the source code (or run the build in an isolated container) before executing the produced binary.
功能分析
Type: OpenClaw Skill
Name: stegstr
Version: 1.0.1
The skill bundle is designed for steganography and Nostr integration, involving cloning a Rust project from GitHub and building a CLI tool. All actions, including filesystem permissions and the use of a private key as an explicit input for Nostr operations, are consistent with the stated purpose. There is no evidence of data exfiltration, malicious execution beyond standard build processes, persistence mechanisms, or prompt injection attempts against the agent to subvert its behavior. The installation script uses a legitimate default GitHub repository (https://github.com/brunkstr/Stegstr.git) and installs to user-local directories.
能力评估
Purpose & Capability
Name/description (PNG steganography for Nostr) align with the SKILL.md and included files: instructions show cloning the Stegstr GitHub repo and building a CLI that performs decode/detect/embed/post. There are no unrelated environment variables, credentials, or binaries requested.
Instruction Scope
Runtime instructions are narrowly scoped to cloning, building, and running the stegstr-cli tool and describe only image payload operations. The SKILL.md does reference external docs and links (stegstr.com, GitHub), but it does not instruct the agent to exfiltrate arbitrary system data. Note: the CLI offers an option to supply a private key (--privkey-hex); handling private keys is sensitive and is a user decision (not automatically required by the skill).
Install Mechanism
No platform install spec; instructions and the included install.sh perform a git clone from GitHub (github.com/brunkstr/Stegstr) and a local cargo build. Using GitHub and building from source is expected for this kind of CLI. Building and executing a compiled binary is normal but carries the usual risk of running software built from source—recommended to review/trust the repo before building.
Credentials
The skill declares no required environment variables or credentials. The included install.sh allows optional override of the repo URL via STEGSTR_REPO_URL (a convenience for advanced users) — this could be abused if a user intentionally points it at an untrusted repo, but it is not required. The CLI supports passing a private key on the command line (sensitive) — the skill does not demand secrets itself.
Persistence & Privilege
The skill is not always-enabled, does not request elevated system-wide privileges, and only needs normal filesystem access to clone/build/install to user-local directories (default ~/.local). install.sh creates user-local files and a symlink in ~/.local/bin; this is expected and proportionate.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install stegstr - 安装完成后,直接呼叫该 Skill 的名称或使用
/stegstr触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
Schema link fix, install script
v1.0.0
- Initial release of Stegstr: a steganographic Nostr client for embedding and decoding hidden messages in PNG images.
- Provides a CLI tool (stegstr-cli) with commands for decoding, detecting, embedding, and posting steganographic payloads.
- Works fully offline, requires no registration, and supports automation via CLI for scripts and agents.
- Supports encrypted and unencrypted payloads, with output in JSON or base64 as appropriate.
- Designed specifically for lossless PNG images to ensure hidden data integrity.
元数据
常见问题
Stegstr 是什么?
Decode and embed Stegstr payloads in PNG images. Use when the user needs to extract hidden Nostr data from a Stegstr image, encode a payload into a cover PNG, or work with steganographic social networking (Nostr-in-images). Supports CLI (stegstr-cli decode, detect, embed, post) for scripts and AI agents. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1380 次。
如何安装 Stegstr?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install stegstr」即可一键安装,无需额外配置。
Stegstr 是免费的吗?
是的,Stegstr 完全免费(开源免费),可自由下载、安装和使用。
Stegstr 支持哪些平台?
Stegstr 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Stegstr?
由 brunkstr(@brunkstr)开发并维护,当前版本 v1.0.1。
推荐 Skills