zcloak-ai-agent

• Analyzed: May 11, 2026, 5:18 AM
• Findings: 1
• Version: 1.0.47
• Hash: 2c661e4d5e1904ccbecbae15c8a1fdbc85c1db0905dd7f5ef32eb694ec4654b3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The zcloak-ai-agent skill bundle provides a comprehensive interface for the zCloak.ai platform, enabling identity management, encrypted messaging (zMail), and on-chain signing. It manages a local identity PEM file (~/.config/zcloak/ai-id.pem) and includes security-oriented features such as 2FA-protected file deletion and VetKey-based encryption. While it includes an automated onboarding post feature in onboarding.md, this behavior is explicitly documented as part of the platform's social workflow. The skill follows standard OpenClaw patterns for installation and updates using npx clawhub, and no indicators of malicious intent or data exfiltration were found.