Agent Identity Protocol

• Analyzed: May 12, 2026, 3:25 AM
• Findings: 1
• Version: 1.0.0
• Hash: 685fa3db34009e679f3455d81c15bdabf9b49a0d2dec0cd18468c9ca5013f1ae
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw Agent Identity skill is designed for cryptographic identity management on-chain, involving private key generation/storage and blockchain interactions. While it handles sensitive data (private keys in `~/.agent-identity/key.json`) and performs network operations (blockchain transactions), these actions are central to its stated purpose. The code demonstrates appropriate file permissions (0o600 for key file), uses standard libraries (`viem`, `commander`), and lacks evidence of unauthorized data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. The installation steps (`git clone`, `npm install`) are standard for a Node.js project.