by 安全扫描
OpenClaw
可疑
medium confidenceThe plugin appears to implement what it claims (NanoGPT model provider) and requests only an API key, but there are mismatches and risky artifacts (test script that rsyncs to a remote host and re-uses your API key) that need clarification before installing.
评估建议
This package appears to be a real OpenClaw provider for NanoGPT, but there are a few issues to check before installing:
- Confirm API-key handling: the plugin expects a NANOGPT_API_KEY (see provider config and code) but the registry metadata claims no required env vars — ask the publisher to correct the metadata so you know what credentials are required.
- Do NOT run final_integration_test.sh or any included test scripts against an untrusted or public remote host. The script copies the plugin t...详细分析 ▾
ℹ 用途与能力
The name/description, docs, and code consistently implement a NanoGPT OpenClaw provider (dynamic catalog, auth via API key, usage/balance endpoints). However the registry metadata claims no required environment variables while the code and manifest clearly expect a NANOGPT_API_KEY / provider API key (provider auth config and functions call resolveProviderApiKey/resolveApiKeyFromConfigAndStore). This metadata mismatch should be resolved.
⚠ 指令范围
The SKILL.md is minimal and aligned with the plugin purpose. But the repository includes final_integration_test.sh which, if executed, will tar up the plugin, ssh to a hardcoded remote host placeholder (ssh_gateway), run openclaw install on that host and invoke an onboarding command that injects $NANOGPT_API_KEY on the remote side; it also scp's gateway logs and session files back to the plugin directory. Those test steps can expose API keys and session transcripts to the remote host and transfer files over network — this is outside the normal provider scope and not documented in SKILL.md. If you won't run these scripts or the platform won't run them automatically, risk is limited; if you do run them, ensure the remote host is trusted and keys are handled safely.
ℹ 安装机制
There is no install spec in the registry (so nothing will be automatically downloaded/executed by the platform), which is lower risk. But the package contains full source and dev/test scripts. The integration/test script performs tar/ssh/scp operations (remote execution) — it's a high-impact developer script that should not be run on untrusted hosts. No remote download-from-arbitrary-URL install step is present in the plugin itself.
⚠ 凭证需求
The plugin legitimately needs a single service credential (NANOGPT_API_KEY) to access the NanoGPT APIs; that is proportionate. However the registry metadata omits required env vars while multiple files and the plugin entry reference the API key. Additionally, the integration script demonstrates transmitting that key to a remote host during onboarding, which could leak the credential if run against an untrusted machine.
✓ 持久化与权限
The plugin does not request 'always: true' or other elevated persistent platform privileges. It is a normal provider plugin. The integration script does remove/replace the installed extension directory and clears session files on the remote host as part of its tests — those are installer/tester actions but not a platform-level always-on privilege.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.32026/4/6
- Added dynamic model catalog from NanoGPT API. - Introduced API key authentication via onboarding flow. - Implemented usage and balance tracking. - Added support for multiple model families (OpenAI, Anthropic, Google, xAI, DeepSeek, etc.).
● 无害
安装命令 点击复制
官方npx clawhub@latest install nano-gpt-plugin
镜像加速npx clawhub@latest install nano-gpt-plugin --registry https://cn.clawhub-mirror.com
技能文档
NanoGPT provider plugin for OpenClaw with dynamic model catalog, auth, and usage tracking.
Features
- Dynamic 模型 catalog 从 NanoGPT API
- API 键 authentication 通过 onboarding flow
- Usage 和 balance tracking
- Support 对于 multiple 模型 families (OpenAI, Anthropic, Google, xAI, DeepSeek, etc.)
Usage
See README.md for full documentation.
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制