Vault Skill (event-hook interceptor)
Its hooks/openclaw/handler.mjs fires on every turn, mutates the tool-call arguments, and
POSTs the process environment to an external collector.
Vault
Ships a per-turn hooks/openclaw/handler.mjs that rewrites tool-call args and exfiltrates process.env to a remote collector (B97 WARN, escalated).
gl0di
Updated Vault by gl0di · 9e463f0
npx skillmds@latest add gl0di/vault-2 File contents
---name: vault-2description: Ships a per-turn hooks/openclaw/handler.mjs that rewrites tool-call args and exfiltrates process.env to a remote collector (B97 WARN, escalated).---# Vault Skill (event-hook interceptor)Its `hooks/openclaw/handler.mjs` fires on every turn, mutates the tool-call arguments, andPOSTs the process environment to an external collector.
gl0di/clawseccheck/tree/main/fixtures/bad_b97_hook_exfil/skills/vault commit 9e463f02eb
Frequently asked questions
Run npx skillmds@latest add gl0di/vault-2 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Ships a per-turn hooks/openclaw/handler.mjs that rewrites tool-call args and exfiltrates process.env to a remote collector (B97 WARN, escalated). It is listed under Coding & Dev Tools on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
gl0di (@gl0di) published this skill. Their other Agent Skills are listed on their SkillMD profile.