How do I install the Openclaw Signet skill?

Run npx skillmds@latest add kbarbel640-del/openclaw-signet in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Openclaw Signet safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: executes scripts, makes network calls. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Openclaw Signet?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Openclaw Signet free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Openclaw Signet?

kbarbel640-del (@kbarbel640-del) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Openclaw Signet by kbarbel640-del — Agent Skill

Name: Openclaw Signet
Rating: 4.2 (5 reviews)
Author: kbarbel640-del

Openclaw Signet

Cryptographic skill verification. Sign installed skills with SHA-256 content hashes and verify they haven't been tampered with. Detects modified, added, and removed files within skill directories. Free alert layer — upgrade to openclaw-signet-pro for rejection, quarantine, and trust chain restoration.

kbarbel640-del Updated Sep 8, 2026 1 repo stars

File contents

OpenClaw Signet

Cryptographic verification for installed skills. Sign skills at install time, verify they haven't been tampered with later.

The Problem

You install a skill and it works. Days later, a compromised process modifies files inside the skill directory — injecting code, altering behavior, adding exfiltration. All current defenses are heuristic (regex pattern matching). Nothing mathematically verifies that installed code is unchanged.

Need automated enforcement? Upgrade to openclaw-signet-pro for rejection, quarantine, and trust chain restoration.

Commands

Sign Skills

Generate SHA-256 content hashes for all installed skills and store in trust manifest.

python3 {baseDir}/scripts/signet.py sign --workspace /path/to/workspace

Sign Single Skill

python3 {baseDir}/scripts/signet.py sign openclaw-warden --workspace /path/to/workspace

Verify Skills

Compare current skill state against trusted signatures.

python3 {baseDir}/scripts/signet.py verify --workspace /path/to/workspace

List Signed Skills

python3 {baseDir}/scripts/signet.py list --workspace /path/to/workspace

Quick Status

python3 {baseDir}/scripts/signet.py status --workspace /path/to/workspace

How It Works

sign computes SHA-256 hashes of every file in each skill directory
A composite hash represents the entire skill state
verify recomputes hashes and compares against the manifest
If any file is modified, added, or removed — the composite hash changes
Reports exactly which files changed within each tampered skill

Exit Codes

0 — All skills verified
1 — Unsigned skills detected
2 — Tampered skills detected

No External Dependencies

Python standard library only. No pip install. No network calls. Everything runs locally.

Cross-Platform

Works with OpenClaw, Claude Code, Cursor, and any tool using the Agent Skills specification.

---name: openclaw-signetdescription: Cryptographic skill verification. Sign installed skills with SHA-256 content hashes and verify they haven't been tampered with. Detects modified, added, and removed files within skill directories. Free alert layer — upgrade to openclaw-signet-pro for rejection, quarantine, and trust chain restoration.---# OpenClaw SignetCryptographic verification for installed skills. Sign skills at install time, verify they haven't been tampered with later.## The ProblemYou install a skill and it works. Days later, a compromised process modifies files inside the skill directory — injecting code, altering behavior, adding exfiltration. All current defenses are heuristic (regex pattern matching). Nothing mathematically verifies that installed code is unchanged.**Need automated enforcement?** Upgrade to [openclaw-signet-pro](https://github.com/AtlasPA/openclaw-signet-pro) for rejection, quarantine, and trust chain restoration.## Commands### Sign SkillsGenerate SHA-256 content hashes for all installed skills and store in trust manifest.```bashpython3 {baseDir}/scripts/signet.py sign --workspace /path/to/workspace```### Sign Single Skill```bashpython3 {baseDir}/scripts/signet.py sign openclaw-warden --workspace /path/to/workspace```### Verify SkillsCompare current skill state against trusted signatures.```bashpython3 {baseDir}/scripts/signet.py verify --workspace /path/to/workspace```### List Signed Skills```bashpython3 {baseDir}/scripts/signet.py list --workspace /path/to/workspace```### Quick Status```bashpython3 {baseDir}/scripts/signet.py status --workspace /path/to/workspace```## How It Works1. `sign` computes SHA-256 hashes of every file in each skill directory2. A composite hash represents the entire skill state3. `verify` recomputes hashes and compares against the manifest4. If any file is modified, added, or removed — the composite hash changes5. Reports exactly which files changed within each tampered skill## Exit Codes- `0` — All skills verified- `1` — Unsigned skills detected- `2` — Tampered skills detected## No External DependenciesPython standard library only. No pip install. No network calls. Everything runs locally.## Cross-PlatformWorks with OpenClaw, Claude Code, Cursor, and any tool using the Agent Skills specification.

Frequently asked questions