← Back to Skills Marketplace
holgercw

verifiable-data

by holgercw · GitHub ↗ · v1.0.4 · MIT-0
cross-platform ⚠ suspicious
167
Downloads
0
Stars
0
Active Installs
5
Versions
Install in OpenClaw
/install cryptowerk-verifiable-data
Description
Register, fetch, and verify SHA-256 hashes of files with Cryptowerk seals using local sidecar files and no SDK dependency for proof-carrying workflows.
README (SKILL.md)

Verifiable Data

Use this skill for Cryptowerk-backed proof workflows.

Supported primitives:

  • obtain a fresh service credential
  • register data using its SHA-256 hash and receive a retrieval id
  • fetch a seal by retrieval id
  • verify data against a seal

Default style:

  • sidecar files for local state
  • no SDK dependency

When to use

Use this skill when the user wants:

  • verifiable logs
  • proof of existence
  • Cryptowerk sealing
  • retrieval IDs and seals stored locally
  • deterministic local artifacts for later audit

Workflow

  1. Register a file hash with scripts/register.py
  2. Poll for a seal with scripts/getseal.py
  3. Verify with scripts/verify.py

Requirements

Required binaries:

  • python3

Credential handling:

  • keep issued tokens out of watched or committed trees
  • the skill uses service credentials only for the documented proof-APIs

Quick start

Register a file

Fetch a seal

Verify a file

Local artifacts

  • \x3Cfile>.cwseal

Rules

  • Use SHA-256 over exact raw bytes.
  • Keep issued Cryptowerk tokens outside watched trees.
  • Keep the seal and metadata in a sidecar file .cwseal .

References

Read these when needed:

  • references/cryptowerk-api-notes.md
  • references/storage-and-state.md

Scripts

  • scripts/register.py
  • scripts/getseal.py
  • scripts/verify.py
Usage Guidance
Before installing, verify that this package is from the Cryptowerk source you trust, understand that it will contact aiagent.cryptowerk.com with file hashes, and protect the generated cwconfig.json and .cwseal files.
Capability Analysis
Type: OpenClaw Skill Name: cryptowerk-verifiable-data Version: 1.0.4 The skill implements document notarization logic but contains several red flags in `scripts/cwcommon.py`, including the use of ROT13 obfuscation for JSON keys (e.g., 'ncvXrl' for 'apiKey') and a hardcoded Base64 bootstrap token used to fetch service credentials. The file also contains an unused `downloadFile` function and a commented-out `autoUpdate` routine that the author explicitly notes was 'flagged by openclaw scan,' suggesting an intentional effort to bypass static analysis. While no direct evidence of data exfiltration was found, these obfuscation and evasion tactics regarding credential handling and remote updates warrant a suspicious classification.
Capability Tags
cryptocan-make-purchasesrequires-sensitive-credentials
Capability Assessment
ℹ Purpose & Capability
The file-hash registration, seal fetching, and verification behavior is coherent with the stated Cryptowerk proof workflow, with the important caveat that hashes and proof metadata are sent to an external service.
✓ Instruction Scope
The instructions are user-directed and limited to running the included Python scripts for register, getseal, and verify workflows; no prompt-injection or goal-override behavior was found.
ℹ Install Mechanism
There is no install spec and no package installation, but registry metadata under-declares the runtime requirement because the skill's own files require python3.
ℹ Credentials
Network calls to Cryptowerk and local sidecar writes are proportionate to the proof workflow, but they create external provider records and local state.
ℹ Persistence & Privilege
The skill persists issued Cryptowerk credentials in a cwconfig.json file under the skill directory and persists proof state in .cwseal sidecars; no background persistence or privilege escalation is shown.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install cryptowerk-verifiable-data
  3. After installation, invoke the skill by name or use /cryptowerk-verifiable-data
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.4
- Updated project homepage URL in the metadata from "www.cryptowerk.com" to "https://www.cryptowerk.com" - No changes to core functionality; documentation and metadata only
v1.0.3
verifiable-data v1.0.3 - Updated documentation in SKILL.md, providing clear instructions on how to register data, fetch seals, and verify proofs using Cryptowerk. - Clarified workflow steps and use cases for proof-carrying data processes with local artifacts and no SDK dependency. - Outlined requirements, default credential handling, and recommended practices for sidecar file management. - Added concise examples and references for getting started with the skill’s CLI scripts.
v1.0.2
- Removed obsolete script: scripts/update.py - Updated scripts/cwcommon.py (details not specified) - No changes to core workflow or documentation
v1.0.1
verifiable-data 1.0.1 - Improved SKILL.md documentation with detailed usage instructions and best practices. - Clarified supported primitives and local artifact handling. - Added quick start commands for core workflows. - Specified credential management and requirements. - No functional or breaking changes to skill logic.
v1.0.0
Initial release of verifiable-data skill for Cryptowerk-backed proof workflows. - Register data using SHA-256 hash and obtain retrieval IDs without SDK dependency. - Fetch seals and verify proofs for files or append-only records. - Stores local sidecar artifacts (.cwseal) for state and audit. - Automatically handles service credentials; does not perform purchases or unrelated account actions. - Provides Python scripts for register, fetch, and verify operations.
Metadata
Slug cryptowerk-verifiable-data
Version 1.0.4
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 5
Frequently Asked Questions

What is verifiable-data?

Register, fetch, and verify SHA-256 hashes of files with Cryptowerk seals using local sidecar files and no SDK dependency for proof-carrying workflows. It is an AI Agent Skill for Claude Code / OpenClaw, with 167 downloads so far.

How do I install verifiable-data?

Run "/install cryptowerk-verifiable-data" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is verifiable-data free?

Yes, verifiable-data is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does verifiable-data support?

verifiable-data is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created verifiable-data?

It is built and maintained by holgercw (@holgercw); the current version is v1.0.4.

More Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191115 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 Comments