Community code plugin. Review compatibility and verification before install.
Latest release: v0.0.1Download zip
Capabilities
Compatibility
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The README, manifest, commands, and code consistently describe browser-led VeriAgent onboarding, local certificate setup, status, signing, verification, listing agents, and reset.
Instruction Scope
The registered tools and CLI commands are narrow and user-invoked; signing and verification require an agentId plus explicit text or file input.
Install Mechanism
There is no npm postinstall or automatic install script; onboarding starts through explicit commands such as init/install or the registered install tool.
Credentials
The plugin uses network-backed VeriAgent portal/API endpoints and local file paths for certificate workflows, which fits its purpose but means users should trust the VeriAgent service and publisher.
Persistence & Privilege
Runtime state and certificate materials are stored under ~/.openclaw/veriagent by default, with a reset command provided to clear local state.
Scan Findings in Context
[SQP-3] unexpected: SkillSpector flagged Chinese-only user-facing strings in the CLI and tool descriptions. The strings are present, but this is a localization/usability concern rather than evidence of hidden behavior, overbroad authority, exfiltration, or malicious intent.
Assessment
Install this only if you intend to use VeriAgent for agent certificates and signing. Review the VeriAgent backend/portal you connect to, understand that certificate materials will be stored locally, and use the reset command if you need to clear the plugin's local state.Verification
Tags
@esign-cn/openclaw-veriagent
OpenClaw-side local plugin wrapper for VeriAgent onboarding and certificate tools.
What it does
- Starts VeriAgent browser-led onboarding
- Generates local CSR materials
- Downloads and imports certificates
- Exposes local
signandverifycommands for agent certificates
Requirements
- Node.js 18 or later for local plugin runtime
- A reachable VeriAgent backend that exposes the plugin onboarding APIs
- Browser access to the matching VeriAgent portal
Install
npx -y --package @esign-cn/openclaw-veriagent veriagent-openclaw install
Runtime state
- Default runtime state is stored under
~/.openclaw/veriagent/
