Verified Agent Identity

• Analyzed: May 13, 2026, 12:11 PM
• Findings: 1
• Version: 2.0.2
• Hash: 2614e2edb68597b75d9ffa58de6804e3f01f83200dc4f2fcbb81dfad97648787
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a decentralized identity (DID) management toolkit for AI agents using the iden3 protocol. It implements legitimate cryptographic operations, including Ethereum-based identity creation, challenge signing, and handling HTTP 402 payment flows. Security is addressed through isolated storage (~/.openclaw/billions/), optional AES-256-GCM at-rest encryption for private keys (scripts/shared/storage/crypto.js), and detailed instructions (SKILL.md) that enforce human-in-the-loop confirmation for payments and attestations. No evidence of data exfiltration, unauthorized execution, or malicious prompt injection was found.