KlausNomi
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears purpose-aligned for talking to Nomi AI companions, but users should know it uses their Nomi API key, sends conversation text to Nomi, can manage rooms, and may store local conversation context.
Install only if you are comfortable giving the skill access to your Nomi API key and sending selected conversation text to Nomi. Keep destructive room actions user-approved, avoid sharing secrets in chats or local notes, and periodically clean up the local nomi/ state if you do not want summaries retained.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
While the API key is present, the skill can act through the user's Nomi account for supported companion and room operations.
The CLI requires and uses the user's Nomi API key to authenticate API calls, which is expected for this integration but gives the skill delegated access to the user's Nomi account.
api_key = os.environ.get("NOMI_API_KEY", "") ... "Authorization": api_keyUse a dedicated or revocable Nomi API key if available, do not store it in local files, and revoke or rotate it if you stop using the skill.
An agent using this skill could create, update, or delete Nomi room data if asked or if the workflow leads there.
The CLI can send messages and modify or delete Nomi rooms. These operations fit the conversation/room-management purpose, but they can change account data.
_api_json("POST", f"/nomis/{args.uuid}/chat", api_key, payload=payload) ... _api_json("PUT", f"/rooms/{args.room_uuid}", api_key, payload=payload) ... _api_json("DELETE", f"/rooms/{args.room_uuid}", api_key)Confirm room updates or deletions explicitly, and review generated messages before sending when the content is important.
Conversation text shared through the skill leaves the local environment and is handled by the Nomi service.
User-provided message text is sent to the external Nomi API as part of the intended chat workflow.
BASE_URL = "https://api.nomi.ai/v1" ... payload = {"messageText": args.message}Avoid sending secrets or highly sensitive personal information unless you are comfortable sharing it with Nomi under its service terms.
Local summaries or notes may persist across sessions and influence later Nomi interactions.
The skill explicitly allows persistent local state for profiles, room notes, and conversation summaries; it also instructs not to store secrets.
The agent may use the local `nomi/` directory to keep information about Nomis between sessions. ... Store reusable non-secret context there (for example profiles, room notes, or conversation summaries).
Periodically review or delete the local nomi/ directory, and do not store secrets or sensitive details in these notes.