Nostr Social — 为智能体赋能 Nostr 社交身份和 eCash 钱包

Name: Nostr Social — 为智能体赋能 Nostr 社交身份和 eCash 钱包
Rating: 1 (3 reviews)
Author: Shawn Yeager

Shawn Yeager

Nostr Social — 为智能体赋能 Nostr 社交身份和 eCash 钱包

v1.1.8

赋予您的智能体一个完整的 Nostr 社交身份和 eCash 钱包。该技能通过单一助记词（NIP-06）备份所有内容，实现智能体的自主身份和资金管理。

3· 2,321·0 当前·0 累计

by @shawnyeager (Shawn Yeager)·MIT-0

系统工具智能体

下载技能包

License

MIT-0

最后更新

2026/2/26

安全扫描

VirusTotal

无害

查看报告

OpenClaw

安全

high confidence

该技能的代码、安装步骤和运行指令与其声明的目的（创建 Nostr 身份和 eCash 钱包）一致。它不会请求无关的凭据，其行为可解释，但会在您的机器上创建和控制加密密钥和钱包，因此应备份助记词并谨慎处理资金。

评估建议

安装前请注意：1) 了解智能体将创建和控制本地密钥和钱包文件，可能花费资金；2) 立即备份 ~/.cocod/config.json 中的 24 词助记词；3) 审查脚本或在沙盒中安装；4) 在测试通过前避免存入大量资金。...

详细分析 ▾

✓ 用途与能力

技能的名称/描述与文件和指令一致，安装 Node 依赖，使用 Cocod 创建 Cashu + Lightning 钱包，通过 NIP-06 从助记词派生 Nostr 密钥，写入 ~/.nostr/secret.key 和 ~/.cocod/config.json，发布到 Nostr 中继。无不相关的凭据或二进制请求。

✓ 指令范围

SKILL.md 和脚本指示智能体运行 install.sh（npm 安装）、初始化 Cocod、从 ~/.cocod/config.json 派生密钥、设置个人资料、关注 npubs、发布等。指令仅引用预期文件/路径和 Nostr 中继，明确要求用户同意和手动备份。技能在用户主目录读写文件，使用必要的网络端点。

ℹ 安装机制

安装是一个简单的 npm 安装，位于 scripts 目录（install.sh），从公共 npm 注册表拉取包（cocod、nostr-tools 和依赖）。这是一个标准的中等风险机制，适用于 Node 工具；未发现任意 URL 下载或远程提取步骤。

ℹ 凭证需求

技能不请求环境变量或外部凭据，但创建和访问本地敏感数据（~/.cocod/config.json 的助记词和 ~/.nostr/secret.key 的私钥）。这些访问用于统一身份/钱包行为，但授予技能签署帖子和花费智能体钱包资金的能力——SKILL.md 指出支付需要明确命令，但这是一种用户必须接受的操作风险。

✓ 持久化与权限

always 为 false，技能不请求系统范围的更改或修改其他技能。它安装本地 Node 包，写入用户主目录文件（~/.nostr, ~/.cocod），这对于钱包/身份技能是预期的。未请求 'always: true' 或其他高级持久性。

安全有层次，运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发，无需署名。

查看条款 ↗

运行时依赖

无特殊依赖

版本

latestv1.1.82026/2/7

安全修复：移除私钥控制台日志输出并修复隐私文档矛盾

● 无害

安装命令点击复制

官方npx clawhub@latest install nostr-social

镜像加速npx clawhub@latest install nostr-social --registry https://cn.clawhub-mirror.com

技能文档

（由于原始内容过长，以下为简略翻译，保留关键结构和命令）

name: Nostr Social (description 中文同上) tags: nostr, bitcoin, lightning, cashu, identity, social, wallet

# Nostr 技能自主 Nostr 身份 + eCash 钱包。完整引导式设置。 ... （命令和设置部分保持英文，仅示意）

Self-sovereign Nostr identity + ecash wallet. Complete bootstrap.

Capabilities Disclosure

This skill grants these capabilities to the agent:

Key generation — Creates Nostr keypair in ~/.nostr/secret.key
Wallet creation — Cashu wallet in ~/.cocod/ (mnemonic in config.json — user backs up)
Nostr posting — Posts, DMs, zaps as the agent's identity

Agent runs wallet/identity setup with explicit user consent. User is directed to back up ~/.cocod/config.json (contains mnemonic). Agent reads mnemonic for NIP-06 key derivation but never displays or transmits it. Profile images use URLs only (no local file access).

On Install

When skill is installed (user pastes ClawHub link), run this flow:

Step 1: Secure Setup (User Consent Required)

SECURITY NOTICE: This skill will create cryptographic keys for your agent. This requires:

Creating Nostr identity keypair in ~/.nostr/secret.key
Creating Cashu wallet with backup seed in ~/.cocod/config.json
User must explicitly backup the mnemonic seed phrase

# Install dependencies
bash {SKILL_DIR}/install.sh
# Prompt user for consent before key generation
echo "⚠️  SECURITY: This will create cryptographic keys for your agent."
echo "   - Nostr identity keypair: ~/.nostr/secret.key"  
echo "   - Cashu wallet seed: ~/.cocod/config.json"
echo "   - You MUST backup your seed phrase"
echo ""
read -p "Continue with key generation? (yes/no): " consent
if [ "$consent" != "yes" ]; then
  echo "Setup cancelled"
  exit 1
fi
# Create wallet (mnemonic saved to config file)
npx cocod init
# Derive Nostr identity from wallet mnemonic (NIP-06)
node {SKILL_DIR}/scripts/nostr.js init
# Get identity info
NPUB=$(node {SKILL_DIR}/scripts/nostr.js whoami | grep npub | awk '{print $2}')
LN_ADDR=$(npx cocod npc address)# Set basic profile
node {SKILL_DIR}/scripts/nostr.js profile-set '{"name":"","about":"","lud16":"'$LN_ADDR'"}'

Step 2: Report Results + Backup Warning

Reply to user:

⚡ Nostr identity ready!

npub: npub1... Lightning address: npub1...@npubx.cash

⚠️ IMPORTANT: Back up your recovery phrase

Your 24-word mnemonic is stored in:

~/.cocod/config.json

This phrase recovers both your Nostr identity AND ecash wallet. Back it up securely and protect this file.

Reply "done" when you've backed it up.

Step 3: Wait for "done"

Do not proceed until user confirms backup.

Step 4: Ask for Owner's npub

What's your Nostr npub?

I'll follow you so we stay connected.

(Paste your npub1... or NIP-05 like you@domain.com)

Then:

# If NIP-05, resolve first
node {SKILL_DIR}/scripts/nostr.js lookup # Follow owner
node {SKILL_DIR}/scripts/nostr.js follow

Step 5: Ask for Profile Images

Do you have profile images for me?

Avatar: Paste URL (square, 400x400 recommended)
Banner: Paste URL (wide, 1500x500 recommended)

Or say "skip" and I'll generate unique ones automatically.

If URLs provided:

node {SKILL_DIR}/scripts/nostr.js profile-set '{"picture":"","banner":""}'

If skipped, use DiceBear (deterministic, unique per npub):

AVATAR="https://api.dicebear.com/7.x/shapes/png?seed=${NPUB}&size=400"
BANNER="https://api.dicebear.com/7.x/shapes/png?seed=${NPUB}-banner&size=1500x500"
node {SKILL_DIR}/scripts/nostr.js profile-set '{"picture":"'$AVATAR'","banner":"'$BANNER'"}'

Step 6: First Post

Ready for your first post?

Tell me what to post, or say "skip".

Suggestion: "Hello Nostr! ⚡"

If user provides text (use stdin to avoid shell injection):

echo "" | node {SKILL_DIR}/scripts/nostr.js post -

Step 7: Done

✅ All set!

Following you ✓
First post live ✓ (if not skipped)

Try: "check my mentions" or "post "

Commands Reference

Posting

# Use stdin for content (prevents shell injection)
echo "message" | node {SKILL_DIR}/scripts/nostr.js post -
echo "reply text" | node {SKILL_DIR}/scripts/nostr.js reply  -
node {SKILL_DIR}/scripts/nostr.js react  🔥
node {SKILL_DIR}/scripts/nostr.js repost 
node {SKILL_DIR}/scripts/nostr.js delete

Reading

node {SKILL_DIR}/scripts/nostr.js mentions 20
node {SKILL_DIR}/scripts/nostr.js feed 20

Connections

node {SKILL_DIR}/scripts/nostr.js follow 
node {SKILL_DIR}/scripts/nostr.js unfollow 
node {SKILL_DIR}/scripts/nostr.js mute 
node {SKILL_DIR}/scripts/nostr.js unmute 
node {SKILL_DIR}/scripts/nostr.js lookup

DMs

echo "message" | node {SKILL_DIR}/scripts/nostr.js dm  -
node {SKILL_DIR}/scripts/nostr.js dms 10

Zaps

# Get invoice
node {SKILL_DIR}/scripts/nostr.js zap  100 "comment"
# Pay it
npx cocod send bolt11

Wallet

npx cocod balance
npx cocod receive bolt11 1000    # Create invoice
npx cocod send bolt11   # Pay invoice
npx cocod npc address            # Lightning address

Profile

node {SKILL_DIR}/scripts/nostr.js whoami
node {SKILL_DIR}/scripts/nostr.js profile
node {SKILL_DIR}/scripts/nostr.js profile "Name" "Bio"
node {SKILL_DIR}/scripts/nostr.js profile-set '{"name":"X","picture":"URL","lud16":"addr"}'

Bookmarks

node {SKILL_DIR}/scripts/nostr.js bookmark 
node {SKILL_DIR}/scripts/nostr.js unbookmark 
node {SKILL_DIR}/scripts/nostr.js bookmarks

Relays

node {SKILL_DIR}/scripts/nostr.js relays
node {SKILL_DIR}/scripts/nostr.js relays add 
node {SKILL_DIR}/scripts/nostr.js relays remove

Autoresponse (Heartbeat Integration)

# Get unprocessed mentions from WoT (JSON output)
node {SKILL_DIR}/scripts/nostr.js pending-mentions [stateFile] [limit]
# Mark mention as responded (after replying)
node {SKILL_DIR}/scripts/nostr.js mark-responded  [responseNoteId]
# Mark mention as ignored (no response needed)
node {SKILL_DIR}/scripts/nostr.js mark-ignored  [reason]
# Check hourly rate limit (max 10/hr)
node {SKILL_DIR}/scripts/nostr.js rate-limit# Show autoresponse state summary
node {SKILL_DIR}/scripts/nostr.js autoresponse-status

State file: ~/.openclaw/workspace/memory/nostr-autoresponse-state.json WoT source: Owner's follow list (defined in nostr.js as OWNER_PUBKEY)

User Phrases → Actions

User says	Action
"post X"	`echo "X" \`	nostr.js post -
"reply to X with Y"	`echo "Y" \`	nostr.js reply -
"check mentions"	`nostr.js mentions`
"my feed"	`nostr.js feed`
"follow X"	Lookup if NIP-05 → `nostr.js follow`
"DM X message"	`echo "message" \`	nostr.js dm -
"zap X 100 sats"	`nostr.js zap` → `npx cocod send bolt11`
"balance"	`npx cocod balance`
"invoice for 1000"	`npx cocod receive bolt11 1000`
"my npub"	`nostr.js whoami`
"my lightning address"	`npx cocod npc address`

Defaults

Setting	Value
Mint	`https://mint.minibits.cash/Bitcoin`
Lightning domain	`@npubx.cash`
Avatar fallback	`https://api.dicebear.com/7.x/shapes/png?seed=`
Nostr key	`~/.nostr/secret.key`
Wallet data	`~/.cocod/`

Integration

SOUL.md

Pull name/about from SOUL.md or IDENTITY.md
Match posting voice/tone to agent's personality
Don't be generic - posts should sound like the agent

HEARTBEAT.md

Add to heartbeat rotation (every 2-4 hours):

# Check Nostr activity
node {SKILL_DIR}/scripts/nostr.js mentions 10
node {SKILL_DIR}/scripts/nostr.js dms 5

If mentions from WoT or zaps received → notify user.

TOOLS.md

After setup, store for quick reference:

## Nostr
npub: npub1...
Lightning: npub1...@npubx.cash  
Owner: npub1... (followed)

Profile Sources

Name: IDENTITY.md or SOUL.md
About: SOUL.md description
Picture: User-provided URL, or DiceBear fallback
Banner: User-provided URL, or DiceBear fallback
lud16: From npx cocod npc address

数据来源：ClawHub ↗ · 中文优化：龙虾技能库

OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制

了解定制服务

License

运行时依赖

版本

安装命令 点击复制

技能文档

Capabilities Disclosure

On Install

Step 1: Secure Setup (User Consent Required)

Step 2: Report Results + Backup Warning

Step 3: Wait for "done"

Step 4: Ask for Owner's npub

Step 5: Ask for Profile Images

Step 6: First Post

Step 7: Done

Commands Reference

Posting

Reading

Connections

DMs

Zaps

Wallet

Profile

Bookmarks

Relays

Autoresponse (Heartbeat Integration)

User Phrases → Actions

Defaults

Integration

SOUL.md

HEARTBEAT.md

TOOLS.md

Profile Sources

安装命令点击复制