Verified Agent Identity

• Outcome: Review
• Latest audit: May 29, 2026 at 9:22 PM UTC
• Version:
  0.1.0

Overview

This identity skill is purpose-aligned, but it asks users to run missing/unreviewed Node scripts that would handle persistent private keys and signed identity proofs.

Install only after you can inspect the referenced scripts and dependencies from a trusted source. Use a dedicated low-value identity key, avoid passing existing private keys on the command line, protect `$HOME/.openclaw/billions`, and confirm the recipient and challenge before any signing or linking operation.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The activation guidance is broad enough to match common identity, signing, verification, and token-authentication requests, which can cause the agent to invoke this skill in situations where the user did not explicitly consent to DID operations or signing actions. In an identity-management skill, overbroad triggering is dangerous because it can lead to unnecessary authentication flows, message sending, or use of locally stored keys during ordinary conversations.

Missing User Warnings

High

• Confidence: 98% confidence
• Finding: The skill instructs users to create identities and potentially supply an existing private key on the command line, but does not present an explicit warning beforehand that sensitive key material will be stored under $HOME/.openclaw/billions and that kms.json contains unencrypted private keys. This is dangerous because command-line arguments may be exposed via shell history or process listings, and unencrypted local key storage materially increases the risk of credential theft and identity compromise.

VirusTotal

66/66 vendors flagged this skill as clean.