📦 AI-native Bitcoin payments. Buy, sell, send, and request Bitcoin directly through any existing messenger app (Telegram, WhatsApp, Signal, Email) or create your own email accounts to start messaging vi — 原生 AI 比特币支付。通过任何现有通讯应用（Telegram、WhatsApp、Signal、Email）直接买卖、发送和请求 Bitcoin，或创建自己的邮箱账户开始消息交互。
v1.0.5通过 BitChat 实现人类与 AI agent 间的支付通道。优先支持 Telegram。
0· 374·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidence该技能的说明大致符合“Bitcoin-in-messenger”支付服务，但存在多个令人担忧的信号（提示注入标记、密钥处理指令以及自主循环检查），在安装前需仔细审查。
评估建议
This skill generally does what it claims (create Bit-Chat mailboxes, obtain Lightning addresses, send/request BTC via messengers and email) but has behaviors you should deliberately approve and monitor: 1) It will create mailboxes and require persisting passwords — ensure your agent uses a secure secret store (OS keychain, team vault) rather than leaving secrets in chat or in plain files. 2) It instructs periodic polling of the mail endpoint and external messaging channels — limit or review sche...详细分析 ▾
ℹ 用途与能力
The name/description (AI-native Bitcoin payments via Bit-Chat) aligns with the instructions (create a Bit-Chat mailbox, obtain a Lightning address, send/request BTC via email/Telegram/WhatsApp/Signal). It is plausible for an instruction-only skill to rely on existing messenger and mail connectors rather than declared env vars. Note: the skill expects network access, ability to send messages and create mailboxes via https://mail.bit-chat.me/register-user.php, and to persist credentials locally — capabilities that are not explicitly declared but are required for its operation.
⚠ 指令范围
The SKILL.md tells the agent to create accounts, store mailbox passwords to disk or a secret store, check IMAP mail regularly (mail.bit-chat.me), contact external bots/phone numbers, and automatically forward Lightning addresses to a human. It also instructs periodic polling (heartbeat every hour or 10–15 minutes while active). These behaviors are within the stated purpose but expand the agent's activity surface (credential creation/storage, frequent external polling, and automated forwarding). Additionally, a pre-scan found unicode-control-chars in SKILL.md, which can be used for obfuscation or prompt-injection — this is unexpected for a payments skill and raises concern.
✓ 安装机制
Instruction-only skill with no install spec or code files — lowest install risk because nothing is written to disk by the package itself. The skill relies on networked endpoints and existing platform connectors rather than installing third-party code.
ℹ 凭证需求
The skill does not request environment variables or keys, which is consistent if it expects the agent's existing messenger/email integrations to handle credentials. However, it instructs creation and local persistence of mailbox passwords and other secrets (recommended .agent-secrets JSON), so it will cause the agent environment to store new sensitive credentials. Users should verify that secret storage is secure and that the agent is authorized to manage financial rails and credentials.
ℹ 持久化与权限
always:false (not force-included) and normal autonomous invocation allowed. The skill's instructions include recurring heartbeat checks and frequent polling, which—when combined with an agent that can invoke skills autonomously—could produce sustained network activity and ongoing access to funds/addresses. That is not forbidden, but users should be aware and control scheduling/permissions.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.52026/3/6
- 新增推荐的用户引导提示，便于智能体快速上手。 - 未检测到其他功能或文档变更。
● 可疑
安装命令
点击复制官方npx clawhub@latest install bit-chat
镜像加速npx clawhub@latest install bit-chat --registry https://cn.longxiaskill.com