The skill's code and instructions are consistent with a Lightning-aware HTTP client: it installs lnget from the github.com/lightninglabs/lnget repository and documents using local Lightning node credentials and cached tokens — but it can perform real micropayments and will access local wallet credentials, so review config and limits before use.
评估建议
This skill appears to do what it claims (install and run lnget), but it will interact with your local Lightning node and can make micropayments. Before installing or letting an agent invoke it autonomously: 1) Inspect the upstream repo (github.com/lightninglabs/lnget) and the exact version you will install. 2) Run the install script manually in a controlled environment so you can verify behavior. 3) Review and tighten lnget configuration: set sensible LNGET_L402_MAX_COST_SATS / --max-cost, set a...
详细分析 ▾
✓用途与能力
Name/description, SKILL.md, and the install script all align: the skill installs and documents lnget (github.com/lightninglabs/lnget) and shows how to fetch L402-protected resources, manage tokens, and configure Lightning backends. There are no unrelated binaries or unexplained dependencies.
⚠指令范围
The SKILL.md instructs running the included install.sh and many lnget commands that interact with local Lightning backends (lnd, LNC, neutrino), read/write config and token files in the user's home (~/.lnget), and perform payments. It also references LNGET_ environment overrides. While this is expected for a Lightning client, these instructions can read local wallet artifacts (macaroon, tls cert) and initiate payments — actions beyond a simple HTTP client and potentially risky if executed without user oversight.
✓安装机制
install.sh simply runs 'go install github.com/lightninglabs/lnget/cmd/lnget@latest' after checking for Go. This uses a well-known source (GitHub) and does not download random archives or call unknown servers. Risk from installation is low but standard caveats about fetching code from upstream apply.
ℹ凭证需求
The skill declares no required env vars, but the SKILL.md documents LNGET_ environment overrides and references local LND macaroon/tls paths and pairing phrases. Access to these credentials is proportionate to lnget's purpose (it must talk to a Lightning backend and sign/pay invoices), but they are sensitive — the SKILL.md does not declare them as required, so users should be aware the tool will look at local wallet files if configured.
⚠持久化与权限
The skill does not set always:true and does not modify other skills. However, lnget's default behaviors include auto-pay (auto_pay: true in examples) and persistent token storage under ~/.lnget/tokens; combined with the platform's normal autonomous invocation capability, this means an agent that invokes the skill could cause real micropayments if not constrained. This is expected functionally but carries financial risk and deserves explicit user controls (max-cost, --no-pay) before allowing autonomous runs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/11
Initial release of lnget: a Lightning-native HTTP client with automatic L402 payment support.
- Command-line tool for accessing HTTP resources behind Lightning paywalls, with auto L402 payment handling.
- Easily install via provided shell script; supports manual and from-source installation options.
- Supports standard HTTP operations (GET, POST, custom headers, file downloads, quiet/pipe mode, resume, etc.).
- Advanced payment controls: limit max invoice cost, routing fee, or check cost before paying.
- Token management subcommands for listing, showing, removing, or clearing per-domain authorization tokens.
- Lightning backend integration: supports lnd, Lightning Node Connect (LNC), and embedded neutrino wallet modes.
- Configuration via YAML file or environment variables; includes robust command-line options and output modes (JSON, human-readable, verbose).
- Comprehensive documentation for usage, configuration, agent integration, file locations, and exit codes.
by