Remote OpenClaw

lnd-macaroon-bakery

Transportation
v1.0.0
Benign

Bake, inspect, and manage lnd macaroons for least-privilege agent access.

787 downloads787 installsby @roasbeef

Setup & Installation

Install command

clawhub install roasbeef/lnd-macaroon-bakery

If the CLI is not installed:

Install command

npx clawhub@latest install roasbeef/lnd-macaroon-bakery

Or install with OpenClaw CLI:

Install command

openclaw skills install roasbeef/lnd-macaroon-bakery
View on GitHub

or paste the repo link into your assistant's chat

Install command

https://github.com/openclaw/skills/tree/main/skills/roasbeef/lnd-macaroon-bakery

What This Skill Does

Bakes scoped lnd macaroons so each agent receives only the permissions it needs. Supports preset roles (pay-only, invoice-only, read-only, channel-admin, signer-only) and custom URI-level permission sets. Works with local nodes, Docker containers, and remote lnd instances.

Baking per-role macaroons eliminates the need to distribute admin.macaroon, reducing blast radius if any single agent credential is compromised.

When to Use It

  • Issuing pay-only credentials to a payment bot without exposing channel management
  • Giving a billing service invoice-only access to create and look up invoices
  • Scoping signer credentials on a dedicated remote signing node
  • Rotating a macaroon after a suspected credential leak
  • Auditing what permissions an existing macaroon grants before deployment

Example Workflow

Here's how your AI assistant might use this skill in practice.

INPUT

User asks: Issuing pay-only credentials to a payment bot without exposing channel management

AGENT
  1. 1Issuing pay-only credentials to a payment bot without exposing channel management
  2. 2Giving a billing service invoice-only access to create and look up invoices
  3. 3Scoping signer credentials on a dedicated remote signing node
  4. 4Rotating a macaroon after a suspected credential leak
  5. 5Auditing what permissions an existing macaroon grants before deployment
OUTPUT
Bake, inspect, and manage lnd macaroons for least-privilege agent access.

Share this skill

Security Audits

VirusTotalBenign
OpenClawBenign
View full report

These signals reflect official OpenClaw status values. A Suspicious status means the skill should be used with extra caution.

Details

LanguageMarkdown
Last updatedMar 1, 2026
View on GitHub

Similar Skills

VIEW ALL

airfrance-afkl

Track Air France flights using the Air France–KLM Open Data APIs.

1.8K2

idfm-journey-skill

Query Île-de-France Mobilités (IDFM) PRIM/Navitia.

1.8K0

charger

Check EV charger availability (favorites, nearby search) via Google Places.

1.8K1

sholat

Ambil jadwal sholat (imsak, subuh, dzuhur, ashar, maghrib, isya) untuk kota/kabupaten di Indonesia dari API Muslim.

1.7K1