← Back to Skills Marketplace
NotaryOS
by
hellothere012
· GitHub ↗
· v2.4.0
· MIT-0
266
Downloads
1
Stars
0
Active Installs
5
Versions
Install in OpenClaw
/install notaryos
Description
Seal AI agent actions with Ed25519 cryptographic receipts. Verify what your agent did and prove what it chose not to do.
Usage Guidance
This skill appears to implement what it claims: a sanitize helper (pure, local) plus use of a remote Notary API. Before installing or granting a production NOTARY_API_KEY: 1) verify the upstream package source (PyPI project page and GitHub repository) and ensure the release artifacts match the source; 2) confirm why the API domain (api.agenttownsquare.com) differs from the notaryos.org/GitHub URLs and that the service operator is who you expect; 3) prefer creating a limited-scope/test key first (or use the demo key) and monitor outgoing network calls during initial runs. If you need high assurance, review the notaryos SDK source code that will be installed (not just sanitize.py) to confirm it only calls the documented endpoints and handles secrets as promised.
Capability Analysis
Type: OpenClaw Skill
Name: notaryos
Version: 2.4.0
The skill is designed to send agent action metadata and payloads to an external service (api.agenttownsquare.com) for cryptographic signing. While this behavior is documented and aligned with the stated purpose, the transmission of activity logs (including command execution and file changes) to a third party constitutes a high-risk data exfiltration capability. Furthermore, the included 'sanitize.py' uses a basic blacklist-based approach that is inherently incomplete and can be bypassed, and the skill relies on an external PyPI package ('notaryos') whose full logic is not provided in the bundle.
Capability Assessment
Purpose & Capability
The skill name/description (issue/verify cryptographic receipts) matches the declared requirements (python3, a Notary SDK, and an optional NOTARY_API_KEY). Requesting a NOTARY_API_KEY as the primary credential is reasonable. However, the SKILL.md references multiple domains (Github and notaryos.org) while the runtime endpoints are on api.agenttownsquare.com, which is an unexplained domain mismatch that deserves confirmation from the publisher.
Instruction Scope
Runtime instructions are limited: sanitize payloads using the included sanitize.py (which is a pure function with no I/O), then call the NotaryOS API endpoints. The SKILL.md explicitly documents what fields to exclude and which endpoints are used. There is no instruction to read unrelated local files or other environment variables in the provided files.
Install Mechanism
The metadata lists an install kind 'uv' package: notaryos and the docs also show 'pip install notaryos'. 'uv' is an uncommon installer here and the registry metadata does not prove the origin (PyPI vs another host). Installing an SDK will pull code that runs network calls; you should verify the upstream package (PyPI project, source repository, release artifacts) before installing. No archive-URL or untrusted download was found in the skill bundle itself.
Credentials
Only NOTARY_API_KEY is declared as the primary credential and the SKILL.md states a demo key is auto-injected when it is not set. That level of credential access is proportional to a remote receipt service. The included sanitize helper does not access environment variables.
Persistence & Privilege
The skill is not force-installed (always: false) and does not request elevated or system-wide persistent privileges in the provided files. Autonomous invocation is allowed (platform default) but is not combined with other high-risk flags here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install notaryos - After installation, invoke the skill by name or use
/notaryos - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.4.0
Remove requires.env gate (key is optional), add Dependencies section, tighten demo key language, resolve 3 scanner dimension flags
v2.3.0
Switch to metadata.clawdbot, add files declaration, add security manifest header, remove all example secrets from docs and tests
v2.2.2
Remove example secrets that triggered VirusTotal scanner. Sanitize test data uses placeholders instead of realistic values.
v2.2.1
Fix scanner flags: honest data flow docs, BSL-1.1 license, sanitize.py helper, endpoint table, single install path
v2.2.0
Initial ClawHub release — Ed25519 cryptographic receipts for AI agent accountability
Metadata
Frequently Asked Questions
What is NotaryOS?
Seal AI agent actions with Ed25519 cryptographic receipts. Verify what your agent did and prove what it chose not to do. It is an AI Agent Skill for Claude Code / OpenClaw, with 266 downloads so far.
How do I install NotaryOS?
Run "/install notaryos" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is NotaryOS free?
Yes, NotaryOS is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does NotaryOS support?
NotaryOS is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created NotaryOS?
It is built and maintained by hellothere012 (@hellothere012); the current version is v2.4.0.
More Skills