Nostr

Nostr Skill

Self-sovereign Nostr identity + ecash wallet. Complete bootstrap.

Capabilities Disclosure

This skill grants these capabilities to the agent:

• Key generation — Creates Nostr keypair in ~/.nostr/secret.key
• Wallet control — Cashu wallet in ~/.cocod/, can send/receive sats
• File read — Can read images from workspace/tmp only (security restricted)
• Network upload — Uploads images to nostr.build (NIP-98 signed, images only)
• Nostr posting — Posts, DMs, zaps as the agent's identity

These are required for the skill's purpose. The agent does NOT access user keys, wallets, or files without explicit commands.

On Install

When skill is installed (user pastes ClawHub link), run this flow:

Step 1: Install Dependencies

bash {SKILL_DIR}/install.sh

Step 2: User Creates Wallet (SECURITY)

IMPORTANT: The mnemonic is sensitive. The user must run this themselves.

Reply to user:

⚡ Almost ready!

First, you need to create the wallet yourself (so I never see the recovery phrase):

1. Open a terminal
2. Run: cocod init
3. SAVE THE 24 WORDS — this backs up everything
4. Reply "done" when complete

(This keeps your recovery phrase private — I won't see it)

Step 3: Wait for "done"

Do not proceed until user confirms wallet creation.

Step 4: Create Nostr Identity

# Derives from wallet mnemonic via NIP-06
# One mnemonic backs up both wallet AND identity
node {SKILL_DIR}/scripts/nostr.js init

# Get identity info
NPUB=$(node {SKILL_DIR}/scripts/nostr.js whoami | grep npub | awk '{print $2}')
LN_ADDR=$(cocod npc address)

# Set basic profile (name/about from SOUL.md, Lightning address)
node {SKILL_DIR}/scripts/nostr.js profile-set '{"name":"<NAME>","about":"<ABOUT>","lud16":"'$LN_ADDR'"}'

Step 5: Report Results

Reply to user:

✅ Nostr identity created!

npub: npub1... Lightning address: npub1...@npubx.cash

Step 6: Ask for Owner's npub

What's your Nostr npub?

I'll follow you so we stay connected.

(Paste your npub1... or NIP-05 like you@domain.com)

Then:

# If NIP-05, resolve first
node {SKILL_DIR}/scripts/nostr.js lookup <nip05>

# Follow owner
node {SKILL_DIR}/scripts/nostr.js follow <owner_npub>

Step 7: Ask for Profile Images

Do you have profile images for me?

• Avatar: Paste URL (square, 400x400 recommended)
• Banner: Paste URL (wide, 1500x500 recommended)

Or say "skip" and I'll generate unique ones automatically.

If URLs provided:

node {SKILL_DIR}/scripts/nostr.js profile-set '{"picture":"<avatar_url>","banner":"<banner_url>"}'

If skipped, use DiceBear (deterministic, unique per npub):

AVATAR="https://api.dicebear.com/7.x/shapes/png?seed=${NPUB}&size=400"
BANNER="https://api.dicebear.com/7.x/shapes/png?seed=${NPUB}-banner&size=1500x500"
node {SKILL_DIR}/scripts/nostr.js profile-set '{"picture":"'$AVATAR'","banner":"'$BANNER'"}'

Step 8: First Post

Ready for your first post?

Tell me what to post, or say "skip".

Suggestion: "Hello Nostr! ⚡"

If user provides text:

node {SKILL_DIR}/scripts/nostr.js post "<user's message>"

Step 9: Done

✅ All set!

• Following you ✓
• First post live ✓ (if not skipped)

Try: "check my mentions" or "post "

Commands Reference

Posting

node {SKILL_DIR}/scripts/nostr.js post "message"
node {SKILL_DIR}/scripts/nostr.js reply <note1...> "text"
node {SKILL_DIR}/scripts/nostr.js react <note1...> 🔥
node {SKILL_DIR}/scripts/nostr.js repost <note1...>
node {SKILL_DIR}/scripts/nostr.js delete <note1...>

Reading

node {SKILL_DIR}/scripts/nostr.js mentions 20
node {SKILL_DIR}/scripts/nostr.js feed 20

Connections

node {SKILL_DIR}/scripts/nostr.js follow <npub>
node {SKILL_DIR}/scripts/nostr.js unfollow <npub>
node {SKILL_DIR}/scripts/nostr.js mute <npub>
node {SKILL_DIR}/scripts/nostr.js unmute <npub>
node {SKILL_DIR}/scripts/nostr.js lookup <nip05>

DMs

node {SKILL_DIR}/scripts/nostr.js dm <npub> "message"
node {SKILL_DIR}/scripts/nostr.js dms 10

Zaps

# Get invoice
node {SKILL_DIR}/scripts/nostr.js zap <npub> 100 "comment"
# Pay it
cocod send bolt11 <invoice>

Wallet

cocod balance
cocod receive bolt11 1000    # Create invoice
cocod send bolt11 <invoice>  # Pay invoice
cocod npc address            # Lightning address

Profile

node {SKILL_DIR}/scripts/nostr.js whoami
node {SKILL_DIR}/scripts/nostr.js profile
node {SKILL_DIR}/scripts/nostr.js profile "Name" "Bio"
node {SKILL_DIR}/scripts/nostr.js profile-set '{"name":"X","picture":"URL","lud16":"addr"}'

Bookmarks

node {SKILL_DIR}/scripts/nostr.js bookmark <note1...>
node {SKILL_DIR}/scripts/nostr.js unbookmark <note1...>
node {SKILL_DIR}/scripts/nostr.js bookmarks

Relays

node {SKILL_DIR}/scripts/nostr.js relays
node {SKILL_DIR}/scripts/nostr.js relays add <url>
node {SKILL_DIR}/scripts/nostr.js relays remove <url>

User Phrases → Actions

Image Upload

For custom avatar/banner (not robohash):

# Upload image to nostr.build (NIP-98 authenticated)
# SECURITY: Only .png/.jpg/.jpeg/.gif/.webp from workspace or /tmp
node {SKILL_DIR}/scripts/nostr.js upload /path/to/image.png
# → https://image.nostr.build/abc123.png

# Set in profile
node {SKILL_DIR}/scripts/nostr.js profile-set '{"picture":"https://image.nostr.build/abc123.png"}'

Security restrictions:

• Only image files: .png, .jpg, .jpeg, .gif, .webp
• Only from safe directories: ~/.openclaw/workspace/ or /tmp/
• Cannot upload arbitrary files (prevents data exfiltration)

Defaults

Integration

SOUL.md

• Pull name/about from SOUL.md or IDENTITY.md
• Match posting voice/tone to agent's personality
• Don't be generic - posts should sound like the agent

HEARTBEAT.md

Add to heartbeat rotation (every 2-4 hours):

# Check Nostr activity
node {SKILL_DIR}/scripts/nostr.js mentions 10
node {SKILL_DIR}/scripts/nostr.js dms 5

If mentions from WoT or zaps received → notify user.

TOOLS.md

After setup, store for quick reference:

## Nostr
- npub: npub1...
- Lightning: npub1...@npubx.cash  
- Owner: npub1... (followed)

Profile Sources

• Name: IDENTITY.md or SOUL.md
• About: SOUL.md description
• Picture: User-provided URL, or DiceBear fallback
• Banner: User-provided URL, or DiceBear fallback
• lud16: From cocod npc address