by 安全扫描
OpenClaw
安全
high confidenceThe skill's code, instructions, and required resources are coherent with a CLI that talks to the Mutinynet faucet and GitHub device-flow auth; nothing requests unrelated credentials or surprising system access.
评估建议
This skill appears to do exactly what it says: a CLI that talks to faucet.mutinynet.com and uses GitHub device-flow for login. Before installing, verify you trust the Mutinynet faucet and the GitHub repo/releases (inspect release binaries or build from source with cargo). Be aware the tool stores a faucet JWT unencrypted at ~/.mutinynet/token and that network calls are made to the faucet and to GitHub during login. If you don't trust the faucet URL or prebuilt binaries, build from source and rev...详细分析 ▾
✓ 用途与能力
Name/description (Mutinynet faucet CLI) match the included source and SKILL.md: the binary talks to faucet.mutinynet.com, implements onchain/lightning/channel/bolt11 flows, and performs GitHub device-flow login. The manifest and code reference the expected GitHub and faucet endpoints; nothing unrelated (no cloud provider keys, no system-level credentials) is requested.
✓ 指令范围
SKILL.md instructions are narrow and consistent: install via cargo or download a release, run mutinynet-cli login to perform GitHub device flow, then use commands that call the faucet API. The instructions reference a token stored at ~/.mutinynet/token and optional env vars (MUTINYNET_FAUCET_URL / MUTINYNET_FAUCET_TOKEN) which the code actually respects. The instructions do not ask the agent to read unrelated files or exfiltrate data.
ℹ 安装机制
There is no platform install spec in the registry (instruction-only), but SKILL.md recommends installing via cargo or using GitHub Releases. Installing from source via cargo is normal; if using prebuilt releases, verify release artifacts and the publisher. No opaque download URLs or extract/install scripts are embedded in the skill bundle.
ℹ 凭证需求
The registry lists no required env vars, and the code only uses MUTINYNET_FAUCET_URL and MUTINYNET_FAUCET_TOKEN (and falls back to a token file). Requesting/storing a faucet JWT in ~/.mutinynet/token is proportionate to the CLI's purpose. Users should note the token is written unencrypted to the home directory, and the GitHub device flow requests limited scope (user:email).
✓ 持久化与权限
The skill is not always-on, does not request elevated privileges, and only writes its own token file (~/.mutinynet/token). It does not modify other skills or system-wide agent settings. Autonomous invocation is enabled by default but not combined with other red flags.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.12026/3/17
Initial release — faucet CLI for Mutinynet
● 无害
安装命令 点击复制
官方npx clawhub@latest install mutinynet-cli
镜像加速npx clawhub@latest install mutinynet-cli --registry https://cn.clawhub-mirror.com
技能文档
A CLI tool for interacting with the Mutinynet Bitcoin testnet faucet.
Install
Download a prebuilt binary from GitHub Releases, or install from source:
cargo install mutinynet-cli
Commands
登录
Authenticate with GitHub via device flow. Required before using commands that need a token.
mutinynet-cli login
发送 在...上-chain bitcoin
Send testnet bitcoin to an address. Default amount is 10,000 sats. Accepts Bitcoin addresses or BIP21 URIs.
mutinynet-cli onchain [sats]
Examples:
mutinynet-cli onchain tb1qw508d6qejxtdg4y5r3zarvary0c5xw7kxpjzsxmutinynet-cli onchain tb1qw508d6qejxtdg4y5r3zarvary0c5xw7kxpjzsx 50000
Pay lightning invoice
Pay a lightning invoice. Accepts bolt11 invoices, LNURL, lightning addresses, and nostr npubs.
mutinynet-cli lightning
Examples:
mutinynet-cli lightning lnbc1...mutinynet-cli lightning 用户@walletofsatoshi.com
打开 lightning channel
Open a lightning channel from the faucet node to your node.
mutinynet-cli channel [--push-amount ] [--host ]
Examples:
mutinynet-cli channel 02abc...def 100000mutinynet-cli channel 02abc...def 100000 --推送-amount 50000 --host localhost:9735
Generate bolt11 invoice
Generate a bolt11 invoice from the faucet node. Omit amount for a zero-amount invoice.
mutinynet-cli bolt11 [amount]
Examples:
mutinynet-cli bolt11 5000mutinynet-cli bolt11
Configuration
| Option | Environment Variable | Default |
|---|---|---|
--url | MUTINYNET_FAUCET_URL | https://faucet.mutinynet.com |
--token | MUTINYNET_FAUCET_TOKEN | Loaded from ~/.mutinynet/token |
Common workflows
- 第一个 时间 setup: Run
mutinynet-cli 登录到 认证 带有 GitHub. - Fund wallet: 使用
mutinynet-cli onchain到 接收 testnet sats. - Test lightning: 使用
mutinynet-cli lightning到 pay 或mutinynet-cli bolt11到 接收.
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制