← 返回 Skills 市场
573
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install unhuman
功能描述
Search, register, and manage domain names via unhuman.domains. Pay with bitcoin using agent-wallet. Use when the user wants to find available domains, regist...
安全使用建议
This skill appears to be what it claims: a wrapper for the unhuman npm CLI that can register domains and (optionally) pay via an agent-wallet. Before installing and running it: 1) Inspect the npm package (publisher 'moneydevkit') and, if possible, review its source code to ensure it behaves as documented. 2) Be cautious with the --wallet flag — only enable it when the user explicitly authorizes a real bitcoin payment; the CLI can trigger real payments. 3) Protect the token file (~/.unhuman/tokens.json) and the agent-wallet directory (~/.agent-wallet/) because they contain sensitive credentials; make sure you understand how those are created and backed up. 4) Consider running npx commands manually the first time to verify behavior before letting an agent invoke them autonomously.
功能分析
Type: OpenClaw Skill
Name: unhuman
Version: 1.0.2
The skill bundle describes a legitimate domain management tool that interacts with unhuman.domains and supports Bitcoin payments via an agent-wallet. It uses standard npm package installation and explicitly warns the AI agent to confirm with the user before initiating financial transactions using the `--wallet` flag. While the skill involves managing sensitive data (domain management tokens, wallet keys) stored locally, there is no evidence of intentional data exfiltration, malicious execution, persistence mechanisms, or deceptive prompt injection against the agent. Potential shell injection via the `dns set` command is a vulnerability in how an agent might construct arguments, not an indicator of malicious intent within the skill definition itself.
能力评估
Purpose & Capability
The name/description (domain search, registration, management) matches the declared runtime actions: running the 'unhuman' CLI via npx / npm. The npm install spec (package 'unhuman') is expected for this purpose.
Instruction Scope
SKILL.md contains concrete CLI commands and explicitly describes how payments and token storage work. It instructs use of the agent-wallet only with explicit user consent, and documents that management tokens are stored at ~/.unhuman/tokens.json and agent-wallet state at ~/.agent-wallet/. The instructions do not ask the agent to read unrelated system files or credentials, but they do create and read files in the user's home directory (token storage and wallet state).
Install Mechanism
Install uses the public npm package 'unhuman' (moderate risk profile: installs code from the npm registry). This is proportionate for a CLI provided via npm, but it means you should verify the package's publisher and source before installing.
Credentials
No environment variables are declared, which aligns with SKILL.md. However, the instructions reference and rely on local files (~/.unhuman/tokens.json and ~/.agent-wallet/) for sensitive data (management tokens and wallet keys). Those config paths were not listed in the skill's metadata 'required config paths' field — a mild metadata omission that users should be aware of because these files contain sensitive tokens/keys.
Persistence & Privilege
The skill does not request always: true, does not modify other skills or system-wide configs, and only writes to its own token path under the user's home directory. Agent autonomy for payment is gated by an explicit --wallet flag and the SKILL.md warns to always confirm with the user before using it.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install unhuman - 安装完成后，直接呼叫该 Skill 的名称或使用
/unhuman触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
security scanner fixes: added install metadata, credential docs, wallet safety warnings, explicit user confirmation requirement for payments
v1.0.1
domain management CLI
v1.0.0
initial release — domain search, register, dns, nameservers, renew, recover, agent-wallet auto-pay
元数据
常见问题
unhuman 是什么？
Search, register, and manage domain names via unhuman.domains. Pay with bitcoin using agent-wallet. Use when the user wants to find available domains, regist... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 573 次。
如何安装 unhuman？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install unhuman」即可一键安装，无需额外配置。
unhuman 是免费的吗？
是的，unhuman 完全免费（开源免费），可自由下载、安装和使用。
unhuman 支持哪些平台？
unhuman 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 unhuman？
由 Satbot（@satbot-mdk）开发并维护，当前版本 v1.0.2。
推荐 Skills