Nosi (Publish contents from AI agents)
v0.1.0Publish content to Nosi and get a shareable URL. Use when the user wants to publish text, markdown, or files to nosi.pub for sharing.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description (publish text/markdown/files to nosi.pub) match the instructions which document the publish API and a registration flow. No unrelated binaries, env vars, or config paths are requested.
Instruction Scope
SKILL.md limits actions to asking the user for an API key or email, calling /v1/auth/register, and posting to /v1/publish with X-API-Key. It does not instruct the agent to read local files, scan system state, or exfiltrate unrelated data. One small gap: 'files' are mentioned in the description but publish endpoint shows only a text payload; the skill does not describe a multipart/file upload flow.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk or downloaded during install.
Credentials
No environment variables, credentials, or config paths are required by the skill. The workflow relies on a service-specific API key provided interactively by the user, which is proportional to the stated purpose.
Persistence & Privilege
always is false and the skill does not request persistent system privileges or modify other skills. It does allow normal autonomous invocation (platform default) but does not escalate persistence or privileges.
Assessment
This skill appears to do what it says: it will ask you for a Nosi API key or your email (to register) and then POST your content to nosi.pub. Before using it, consider: (1) anything you publish will be public — do not include secrets, passwords, or private data; (2) when asked for an API key, treat that key like a secret — only provide it if you trust nosi.pub and are willing to let the skill send it in requests; (3) the skill's docs mention files but only show a text publish endpoint — if you need to upload binary files, confirm the expected workflow first; (4) because this is instruction-only, the agent (not installed code) will make outbound requests to nosi.pub — review any privacy/policy concerns with that site. If you want extra safety, create a dedicated account or key for publishing and avoid sharing sensitive content.Like a lobster shell, security has layers — review code before you run it.
latest
Nosi Publishing Skill
Nosi lets you publish text to the open web and get a permanent, shareable URL.
When to Use This Skill
Use this skill when the user says things like:
- "Publish this to Nosi"
- "Share this on Nosi"
- "Post this to nosi.pub"
- "Get a shareable link for this"
API Reference
Base URL: https://nosi.pub
Registration (for new users)
POST /v1/auth/register Content-Type: application/json
{"email": "user@example.com"}
The API key is sent via email (security requirement).
Publishing
POST /v1/publish Content-Type: application/json X-API-Key: nosi_xxxxx
{"content": "Text to publish"}
Returns: {"content_url": "https://nosi.pub/123456", "raw_text_url": "..."}
Workflow
- Ask if user has a Nosi API key
- If no: Ask for email → call register API → tell user to check email → wait for key
- If yes: Get the API key from user
- Publish content with X-API-Key header
- Return the content_url to user
Error Handling
- 401 Invalid key: Ask user to re-register with same email
- 429 Rate limited: Wait a few minutes
- 413 Content too large: Max 100KB
Comments
Loading comments...
