Verified Agent Identity

• Outcome: Review
• Latest audit: May 29, 2026 at 9:26 PM UTC
• Version:
  0.1.0

Overview

This identity skill is purpose-aligned, but it asks for sensitive key and identity-linking operations while the reviewed artifact does not include the scripts that would perform them.

Review before installing. Use a dedicated agent identity, do not pass an Ethereum wallet key that controls assets, set BILLIONS_NETWORK_MASTER_KMS_KEY before creating identities, protect $HOME/.openclaw/billions, and only run the referenced scripts if the installed package actually includes reviewable source and dependencies from a trusted source.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The skill instructs users to create and manage decentralized identities and explicitly states elsewhere that private keys may be stored in plaintext when `BILLIONS_NETWORK_MASTER_KMS_KEY` is not set, but the normal setup flow does not prominently warn about that risk before identity creation. This can lead to accidental generation and persistence of highly sensitive key material on disk without informed consent, increasing the chance of credential theft or identity compromise on shared or insufficiently secured systems.

VirusTotal

64/64 vendors flagged this skill as clean.