OpenClaw Credential Manager

• Analyzed: May 12, 2026, 3:50 AM
• Findings: 1
• Version: 2.0.0
• Hash: 62ed05b0b3dd9358565f35d090e7ef0042f7f9970e11e085a3376376b608002b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw Credential Manager skill is designed to enhance the security posture of an OpenClaw deployment by centralizing, securing, and managing credentials. All scripts and documentation consistently focus on security best practices, such as enforcing file permissions (600 for files, 700 for directories), GPG encryption for high-value secrets, git-ignore protection, deep scanning for hardcoded secrets, and credential rotation tracking. The `CHANGELOG.md` explicitly details fixes for critical security vulnerabilities (e.g., backup file permissions) in version 2.0.0, indicating a proactive security-conscious development. While the skill handles sensitive data and modifies system configurations (like GPG agent settings), these actions are directly aligned with its stated purpose of securing credentials and do not show any evidence of intentional malicious behavior, data exfiltration, unauthorized remote control, or obfuscation for harmful purposes. The strong language in `SKILL.md` and `CORE-PRINCIPLE.md` serves to enforce security policies on the agent and user, not to prompt-inject for malicious actions.