Vault-0: Agent Security, Monitor & x402 Wallet for OpenClaw

Security suite for OpenClaw agents. Encrypted secret storage (AES-256-GCM), real-time activity monitoring via gateway WebSocket, policy enforcement, and native x402 payment wallet with EIP-3009 signing. Secure API keys, watch agent behavior, and handle machine-to-machine micropayments. macOS desktop app (Rust + Tauri). Reads ~/.openclaw/.env during hardening. Installation downloads a DMG from GitHub releases. After install, the app makes no external network calls and only listens on localhost.

This instruction-only skill is coherent with its stated goal (a macOS vault/monitor that reads OpenClaw configs and uses Keychain). Before installing: 1) Manually verify the SHA-256 shown by shasum against the release page before mounting the DMG. 2) Prefer building from source (git clone && npm install && npm run tauri build) if you or someone you trust can audit the code — the DMG is unsigned/notarized per the instructions. 3) Be aware the app will be persistent (installed to /Applications) and will access your OpenClaw files and macOS Keychain (wallet private keys are claimed to remain in Keychain). 4) Do not skip the gatekeeper prompt without understanding the risk. 5) If you cannot or will not audit the release, decline installation or use the build-from-source path. 6) After hardening, verify the expected changes (first line of ~/.openclaw/.env and Vault-0 dashboard) and keep a backup of any wallet mnemonic using a method you trust. If any step is unclear or you cannot confirm the GitHub release integrity, treat the binary as untrusted.

Type: OpenClaw Skill Name: vault0 Version: 1.5.0 The skill 'vault0' is a security suite for OpenClaw agents, designed for secret storage and agent monitoring. The installation process is transparent, downloading a DMG from a public GitHub repository. Crucially, it includes a step to verify the SHA-256 hash of the downloaded file and explicitly instructs the agent to wait for human confirmation against the GitHub release page, which is a strong security practice. All executed commands are standard for macOS application installation and verification, and the skill explicitly states 'localhost-only-after-install' with 'no telemetry, no cloud sync, no external endpoints' post-installation. There is no evidence of malicious intent, data exfiltration, or harmful prompt injection.