- name
- openclaw-signet
- user-invocable
- true
- metadata
- {"openclaw":{"emoji":"🔏","requires":{"bins":["python3"]},"os":["darwin","linux","win32"]}}
OpenClaw Signet
Cryptographic verification for installed skills. Sign skills at install time, verify they haven't been tampered with later.
The Problem
You install a skill and it works. Days later, a compromised process modifies files inside the skill directory — injecting code, altering behavior, adding exfiltration. All current defenses are heuristic (regex pattern matching). Nothing mathematically verifies that installed code is unchanged.
Commands
Sign Skills
Generate SHA-256 content hashes for all installed skills and store in trust manifest.
python3 {baseDir}/scripts/signet.py sign --workspace /path/to/workspaceSign Single Skill
python3 {baseDir}/scripts/signet.py sign openclaw-warden --workspace /path/to/workspaceVerify Skills
Compare current skill state against trusted signatures.
python3 {baseDir}/scripts/signet.py verify --workspace /path/to/workspaceList Signed Skills
python3 {baseDir}/scripts/signet.py list --workspace /path/to/workspaceQuick Status
python3 {baseDir}/scripts/signet.py status --workspace /path/to/workspaceHow It Works
signcomputes SHA-256 hashes of every file in each skill directory- A composite hash represents the entire skill state
verifyrecomputes hashes and compares against the manifest- If any file is modified, added, or removed — the composite hash changes
- Reports exactly which files changed within each tampered skill
Exit Codes
0— All skills verified1— Unsigned skills detected2— Tampered skills detected
No External Dependencies
Python standard library only. No pip install. No network calls. Everything runs locally.
Cross-Platform
Works with OpenClaw, Claude Code, Cursor, and any tool using the Agent Skills specification.