← Back to Skills Marketplace
152
Downloads
2
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install zcloak-ai
Description
Use this skill for zCloak.ai workflows, including agent identity creation, AI Name (.ai/.agent) lookup and registration, owner binding with passkey/WebAuthn,...
Usage Guidance
This skill is an instruction wrapper around an external npm CLI (@zcloak/ai-agent). Before installing or using it: 1) Verify the npm package and its publisher (there is no homepage/repository listed in the skill metadata here). 2) Expect the skill to create and reuse a private key at ~/.config/zcloak/ai-id.pem — treat that file as sensitive, back it up, and decide whether you want an agent-managed key or to provide your own. 3) The CLI will perform network operations (registry lookups, zMail servers, and a self-update check) and may open browser-based WebAuthn flows for owner binding; these are expected but confirm you trust the remote domains (e.g., id.zcloak.ai). 4) If you are unsure about trusting an npm package with a private key, consider running the CLI in an isolated environment (VM/container) or reviewing the package source before granting it persistent local state. 5) Note the small inconsistency: the skill metadata did not mark a required binary even though SKILL.md requires the zcloak-ai CLI — double-check installation instructions and package provenance.
Capability Analysis
Type: OpenClaw Skill
Name: zcloak-ai
Version: 1.0.49
The zcloak-ai skill bundle is a legitimate integration for the zCloak.ai platform, providing tools for decentralized identity, on-chain signing, VetKey encryption, and zMail messaging. The skill uses the official @zcloak/ai-agent CLI and includes explicit safety instructions, such as requiring user confirmation before publishing public posts (onboarding.md) and mandating 2FA/WebAuthn confirmation via a browser for file deletions (binding-and-delete.md). No evidence of malicious intent, data exfiltration, or unauthorized persistence was found; all behaviors align with the stated purpose of managing secure identities and communications.
Capability Assessment
Purpose & Capability
The name/description (zCloak workflows: identity, naming, binding, signing, vetkey, zMail) map to the commands referenced in SKILL.md and the reference docs. Requested actions (identity PEM creation, name lookup/registration, passkey flows, encryption, mailbox registration) are coherent with the stated purpose. One minor metadata mismatch: the registry metadata lists no required binaries while SKILL.md declares a required 'zcloak-ai' CLI and an npm install command.
Instruction Scope
SKILL.md is an instruction-only skill that tells the agent to run the zcloak-ai CLI and to interact with browser-based WebAuthn for owner binding. The instructions focus on identity, signing, encryption, file manifests, zMail, and 2FA delete flows — all within the described scope. It does instruct creation and reuse of a local PEM at ~/.config/zcloak/ai-id.pem and to read/write mailbox cache under ~/.config/zcloak/, which is expected for identity/mailbox operations.
Install Mechanism
No install spec in registry, but SKILL.md tells users to install the CLI via 'npm install -g @zcloak/ai-agent@latest' and to upgrade the skill via 'npx clawhub@latest install zcloak-ai-agent --force'. Using npm/npx is common but pulls code from public registries at runtime (moderate risk). The skill does not point to a homepage or repository and the registry 'Source' and 'Homepage' are unknown — that increases risk because the npm package origin and trustworthiness aren't established.
Credentials
The skill requests no environment variables or third-party credentials, which aligns with its purpose. However it requires creating and reusing a local private key file (~/.config/zcloak/ai-id.pem) and will register the agent with zMail and perform network calls (registry, zcloak servers). Storing a private PEM is necessary for identity operations but is sensitive — users should understand the PEM's location and back it up/protect it.
Persistence & Privilege
The skill is not always-enabled and allows user invocation/autonomous invocation (normal). It will persist state by creating/reusing a PEM and by registering with zMail which writes mailbox cache under ~/.config/zcloak/. These persistent artifacts are appropriate for this skill's function but are privileged (local private key and stored mailboxes).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install zcloak-ai - After installation, invoke the skill by name or use
/zcloak-ai - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.49
- Version updated to 1.0.49.
- No file changes were detected in this release.
- Metadata in SKILL.md now reflects the new version number.
v1.0.48
zcloak-ai 1.0.48
- Expanded workflows for agent identity creation, AI Name registration/lookup, owner binding (passkey/WebAuthn), on-chain signing/verification, and encrypted messaging.
- Improved onboarding, including default identity creation and agent registration with zMail.
- Clarified owner binding restrictions and naming rules for AI Names.
- Detailed references for signing, binding, encryption, and zMail actions.
- User guidance refined: plain outcomes, clear step prompts, and explicit agent vs. user action distinction.
- Skill upgrade and update process now clearly separated from CLI self-update.
Metadata
Frequently Asked Questions
What is zCloak AI?
Use this skill for zCloak.ai workflows, including agent identity creation, AI Name (.ai/.agent) lookup and registration, owner binding with passkey/WebAuthn,... It is an AI Agent Skill for Claude Code / OpenClaw, with 152 downloads so far.
How do I install zCloak AI?
Run "/install zcloak-ai" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is zCloak AI free?
Yes, zCloak AI is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does zCloak AI support?
zCloak AI is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created zCloak AI?
It is built and maintained by zCloak AI (@zcloak-ai); the current version is v1.0.49.
More Skills