NotaryOS

Seal AI agent actions with Ed25519 cryptographic receipts. Verify what your agent did and prove what it chose not to do.

This skill appears to implement what it claims: a sanitize helper (pure, local) plus use of a remote Notary API. Before installing or granting a production NOTARY_API_KEY: 1) verify the upstream package source (PyPI project page and GitHub repository) and ensure the release artifacts match the source; 2) confirm why the API domain (api.agenttownsquare.com) differs from the notaryos.org/GitHub URLs and that the service operator is who you expect; 3) prefer creating a limited-scope/test key first (or use the demo key) and monitor outgoing network calls during initial runs. If you need high assurance, review the notaryos SDK source code that will be installed (not just sanitize.py) to confirm it only calls the documented endpoints and handles secrets as promised.

Type: OpenClaw Skill Name: notaryos Version: 2.4.0 The skill is designed to send agent action metadata and payloads to an external service (api.agenttownsquare.com) for cryptographic signing. While this behavior is documented and aligned with the stated purpose, the transmission of activity logs (including command execution and file changes) to a third party constitutes a high-risk data exfiltration capability. Furthermore, the included 'sanitize.py' uses a basic blacklist-based approach that is inherently incomplete and can be bypassed, and the skill relies on an external PyPI package ('notaryos') whose full logic is not provided in the bundle.