按 OWASP Agentic Skills Top 10 审计已安装的 AI Agent 技能,输出文本、JSON、SARIF 或 HTML 报告。
数据分析
Agent Flight Recorder
试用Use the Cryptowerk Verifiable Data skill to implement an "Agent Flight Recorder" that creates an immutable, cryptographically verifiable audit trail for Open...
它能做什么
Use the Cryptowerk Verifiable Data skill to implement an "Agent Flight Recorder" that creates an immutable, cryptographically verifiable audit trail for OpenClaw agent executions. Register execution hashes to maintain privacy, fetch blockchain seals, and verify proofs for AI workflows, decisions, and data artifacts. Use when the user requires deterministic, proof-carrying agent operations with local sidecar artifacts and no SDK dependency. This skill securely acquires service credentials and exclusively handles proof APIs without executing unrelated account actions or purchases.
技能文档
Verifiable Data
Use this skill for Cryptowerk-backed proof workflows.
Supported primitives:
- obtain a fresh service credential
- register data using its SHA-256 hash and receive a retrieval id
- fetch a seal by retrieval id
- verify data against a seal
Default style:
- sidecar files for local state
- no SDK dependency
When to use
Use this skill when the user wants:
- verifiable logs
- proof of existence
- Cryptowerk sealing
- retrieval IDs and seals stored locally
- deterministic local artifacts for later audit
Workflow
- Register a file hash with
scripts/register.py - Poll for a seal with
scripts/getseal.py - Verify with
scripts/verify.py
Requirements
Required binaries:
python3
Credential handling:
- keep issued tokens out of watched or committed trees
- the skill uses service credentials only for the documented proof-APIs
Quick start
Register a file
Fetch a seal
Verify a file
Local artifacts
.cwseal
Rules
- Use SHA-256 over exact raw bytes.
- Keep issued Cryptowerk tokens outside watched trees.
- Keep the seal and metadata in a sidecar file .cwseal .
References
Read these when needed:
references/cryptowerk-api-notes.mdreferences/storage-and-state.md
Scripts
scripts/register.pyscripts/getseal.pyscripts/verify.py
相关技能
Use this skill when you need to publish, fetch, search, list, share, or watch AgentFiles artifacts from Codex, Claude Code, OpenClaw, or other agent runtimes...
Help users with Validated demand: Agent users show strong demand for Github-style workflows on Clawhub. They need practical help fixing bugs, hardening setup...
Use this skill whenever the user needs compliance evidence from the audit trails their governed AIops agents already write — mapping AI-agent infra-ops activity to HIPAA §164.312, PCI-DSS v4.0, SOC 2 TSC, or GDPR controls, producing a change-approval report, a gap analysis, an exceptions/anomaly report, or a hash-chain-sealed, tamper-evident evidence bundle. Always use this skill for "compliance evidence", "HIPAA / PCI-DSS / SOC 2 / GDPR evidence", "audit trail report", "coverage for control X", "which controls are we short on / gap analysis", "who approved this change / change-management evidence", "denied or errored ops / anomaly evidence", "seal / sign an evidence bundle", "prove this bundle wasn't altered", or "detect deleted audit rows". Do NOT use to scan or operate infrastructure and do NOT treat it as a GRC platform — it reads the local audit databases the OTHER AIops-tools write and converts them to evidence; for platform operations use those other AIops-tools. Evidence, not c
对比一个 ClawHub 技能的两个版本,给出更新是否可应用的判定结果。
Help users with Validated demand: Agent users show strong demand for Github-style workflows on Clawhub. They need practical help fixing bugs, hardening setup...