openclaw-signetCryptographic skill verification. Sign installed skills with SHA-256 content hashes and verify they haven't been tampered with. Detects modified, added, and removed files within skill directories. Free alert layer — upgrade to openclaw-signet-pro for rejection, quarantine, and trust chain restoration.
Install via ClawdBot CLI:
clawdbot install AtlasPA/openclaw-signetCryptographic verification for installed skills. Sign skills at install time, verify they haven't been tampered with later.
You install a skill and it works. Days later, a compromised process modifies files inside the skill directory — injecting code, altering behavior, adding exfiltration. All current defenses are heuristic (regex pattern matching). Nothing mathematically verifies that installed code is unchanged.
Generate SHA-256 content hashes for all installed skills and store in trust manifest.
python3 {baseDir}/scripts/signet.py sign --workspace /path/to/workspacepython3 {baseDir}/scripts/signet.py sign openclaw-warden --workspace /path/to/workspaceCompare current skill state against trusted signatures.
python3 {baseDir}/scripts/signet.py verify --workspace /path/to/workspacepython3 {baseDir}/scripts/signet.py list --workspace /path/to/workspacepython3 {baseDir}/scripts/signet.py status --workspace /path/to/workspacesign computes SHA-256 hashes of every file in each skill directoryverify recomputes hashes and compares against the manifest0 — All skills verified1 — Unsigned skills detected2 — Tampered skills detectedPython standard library only. No pip install. No network calls. Everything runs locally.
Works with OpenClaw, Claude Code, Cursor, and any tool using the Agent Skills specification.
Generated Mar 1, 2026
Large organizations use OpenClaw Signet to ensure AI skill packages remain untampered in regulated environments like finance or healthcare. It provides cryptographic verification for compliance audits, detecting unauthorized modifications to skills that handle sensitive data.
Development teams integrate OpenClaw Signet into CI/CD pipelines to verify skill integrity before deployment in AI-assisted coding tools. It prevents supply chain attacks by checking for file alterations between build stages, ensuring only signed skills are used.
MSPs deploy OpenClaw Signet across client environments to monitor AI skill integrity in multi-tenant setups. It helps maintain service level agreements by quickly identifying tampered skills that could disrupt automated workflows or cause security breaches.
Universities use OpenClaw Signet in computer science labs to ensure student projects and research skills remain unaltered. It provides a trust layer for shared AI environments, preventing accidental or malicious changes to skill files during collaborative work.
Sell annual licenses to large organizations for unlimited skill signing and verification across their AI tool deployments. Include premium support, custom integration assistance, and compliance reporting features.
Offer OpenClaw Signet as a paid add-on in AI tool marketplaces like Claude Code or Cursor. Charge per verification scan or through tiered plans based on the number of skills monitored.
Partner with cybersecurity firms to bundle OpenClaw Signet into their service offerings for AI skill integrity audits. Provide white-label versions and training for consultants to deploy and manage for clients.
💬 Integration Tip
Integrate sign commands into post-install scripts and verify commands into periodic security checks; use exit codes for automated alerting in monitoring systems.
Transform AI agents from task-followers into proactive partners that anticipate needs and continuously improve. Now with WAL Protocol, Working Buffer, Autonomous Crons, and battle-tested patterns. Part of the Hal Stack 🦞
Use the ClawdHub CLI to search, install, update, and publish agent skills from clawdhub.com. Use when you need to fetch new skills on the fly, sync installed skills to latest or a specific version, or publish new/updated skill folders with the npm-installed clawdhub CLI.
Clawdbot documentation expert with decision tree navigation, search scripts, doc fetching, version tracking, and config snippets for all Clawdbot features
Interact with Moltbook social network for AI agents. Post, reply, browse, and analyze engagement. Use when the user wants to engage with Moltbook, check their feed, reply to posts, or track their activity on the agent social network.
OpenClaw CLI wrapper — gateway, channels, models, agents, nodes, browser, memory, security, automation.
MoltGuard — runtime security plugin for OpenClaw agents by OpenGuardrails. Helps users install, register, activate, and check the status of MoltGuard. Use wh...