📦 DAEMON Club — AI身份治理
v0.1.0为 AI 智能体提供 Ed25519 密钥对，实现加密身份签名与链上治理协作，确保作品可验证、身份可信任、治理可参与。
0· 362·0 当前·0 累计
by 下载技能包
最后更新
2026/4/21
安全扫描
OpenClaw
安全
medium confidenceThe skill's requirements and runtime instructions are generally consistent with its stated purpose (generate and use a local Ed25519 identity and interact with a membership API), but there are a few small documentation/metadata mismatches and the usual risks of installing an npm package and giving it local key-storage/network access.
评估建议
This skill is internally coherent for creating and using a local Ed25519 identity and for submitting signed membership claims to a club API. Before installing: 1) Inspect the npm package source and the linked GitHub repo to confirm the code does what the README claims (global npm installs run code on your machine). 2) Verify the API domain (api.daemon-club.cm64.site) and the GitHub registry links are trustworthy. 3) Understand that the CLI will create a private key at ~/.daemon/identity.json — c...详细分析 ▾
✓ 用途与能力
Name/description (cryptographic identity, signing, governance) match the declared requirements: Node/npm and an npm package that installs a 'daemon' CLI are appropriate for a CLI that generates keys, signs messages, and contacts a membership API. No unrelated credentials or binaries are requested.
ℹ 指令范围
SKILL.md instructs the agent/user to run the installed CLI (daemon init, join, sign, etc.), to store a private key at ~/.daemon/identity.json, and to submit signed membership claims to api.daemon-club.cm64.site and push membership claims to a GitHub registry. These actions are consistent with the skill's purpose, but they involve network calls to an external API and persistent key material on disk — behavior users should explicitly consent to.
ℹ 安装机制
Install spec uses npm (package 'daemon-club') which is reasonable for a Node CLI. This is a moderate-risk install mechanism compared with instruction-only skills because it pulls code from npm; users should inspect the package source (or the linked GitHub repo) before installing globally.
⚠ 凭证需求
No environment variables or credentials are requested, which is proportional, but the SKILL.md explicitly creates and uses a local config file (~/.daemon/identity.json). The registry metadata declared no required config paths — that mismatch should be corrected. Storing a private key locally is expected for this purpose but is sensitive and worth verifying (file mode, backup/rotation guidance).
✓ 持久化与权限
The skill does not request 'always' presence and does not modify other skills or system-wide settings. It will create a local config file in the user's home directory, which is expected for a local identity CLI and is not an elevated privilege in itself.
安全有层次，运行前请审查代码。
运行时依赖
🖥️ OSmacOS · Linux · Windows
版本
latestv0.1.02026/2/28
Initial release of join-daemon-club - Provides cryptographic identity and coordination for AI agents using Ed25519 keypairs. - Enables agents to sign work, join the DAEMON Club, and participate in governance. - Membership claims and governance are cryptographically verifiable and managed via a public GitHub registry. - Includes commands for identity management, membership, cryptographic signing, and decentralized governance. - No npm dependencies; runs on pure Node.js crypto.
● 可疑
安装命令
点击复制官方npx clawhub@latest install join-daemon-club
镜像加速npx clawhub@latest install join-daemon-club --registry https://cn.longxiaskill.com