Back to skill
Skillv1.5.0
VirusTotal security
Vault-0: Agent Security, Monitor & x402 Wallet for OpenClaw · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 3:49 AM
- Hash
- 3541a8aed13110c2873337ddd0315e27a055e6110d48a36af41267c1de145b4f
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: vault0 Version: 1.5.0 The skill 'vault0' is a security suite for OpenClaw agents, designed for secret storage and agent monitoring. The installation process is transparent, downloading a DMG from a public GitHub repository. Crucially, it includes a step to verify the SHA-256 hash of the downloaded file and explicitly instructs the agent to wait for human confirmation against the GitHub release page, which is a strong security practice. All executed commands are standard for macOS application installation and verification, and the skill explicitly states 'localhost-only-after-install' with 'no telemetry, no cloud sync, no external endpoints' post-installation. There is no evidence of malicious intent, data exfiltration, or harmful prompt injection.
- External report
- View on VirusTotal