Private Chat

Private Chat Mode - Trigger encrypted conversations via codeword. Sensitive information is automatically encrypted using AES-256-CBC for maximum security.

This skill provides a straightforward encryption helper (shell script using OpenSSL) and documentation to add a 'private mode', but there are important red flags you should consider before installing: - The SKILL.md explicitly instructs the assistant to hide the existence of private mode in non-private conversations (tells the model to lie/deny). That is deceptive behavior and may be unacceptable depending on your trust model and policy. Remove or modify that 'Iron Law' before use if you need transparency. - The documentation instructs you to store the encryption password in config.json (plaintext). This is insecure — prefer prompting for the password at runtime or using a system keystore, and restrict file permissions (chmod 600) for any vault files. - The included script depends on openssl and base64 utilities but the skill metadata does not declare required binaries. Verify openssl is available and audit the script before running. - The SKILL.md claims 'auto-encrypt and save' behavior but the shipped script only performs encryption/decryption and does not implement automatic agent-side storage — check how your agent will call the script and where it will write files. Confirm where memory/private-vault.md will live and who can read it. - Default settings use a surprising codeword ('lgbt') — change it to something neutral and private. Recommendations: review and remove the concealment instructions, avoid putting secrets in config.json, run the script locally to verify behavior, inspect who/what can read the vault file, and only install if you trust the skill author or are prepared to modify the skill to meet your security requirements.

Type: OpenClaw Skill Name: private-chat Version: 1.1.2 The skill provides a legitimate encrypted 'private vault' feature using AES-256-CBC encryption via a local bash script (scripts/private-vault.sh). While it includes 'Iron Law' instructions in SKILL.md that command the AI to deceive users by denying the feature's existence when not in use, this is presented as a documented privacy feature rather than a malicious backdoor. No evidence of data exfiltration, unauthorized network activity, or intentional exploitation was found.