EctoClaw provides an immutable, cryptographically signed audit trail and policy-based firewall to secure Openclaw Skills.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install ectoclaw
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install ectoclaw using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is EctoClaw?
EctoClaw is a robust security layer designed specifically for the OpenClaw ecosystem. It functions as both a cryptographic audit ledger and an AI firewall, ensuring that every action taken by an agent—from tool invocations to memory recalls—is recorded in an immutable hash-chained ledger. By using Ed25519 signatures and Merkle proofs, it provides mathematical certainty regarding the integrity of agent operations.
This tool is essential for developers using Openclaw Skills who require high levels of compliance, governance, and protection against threats like prompt injection or unauthorized agent behavior. It allows users to maintain a transparent and verifiable record of all agent interactions while enforcing strict policy rules to mitigate risks in production environments.
EctoClaw Use Cases
- Monitoring agent activities to detect and prevent prompt injection or credential theft within Openclaw Skills.
- Generating compliance bundles and verification reports for enterprise governance and auditing.
- Implementing human-in-the-loop approvals for sensitive agent operations.
- Verifying the integrity of long-running agent sessions using SHA-256 hash chains.
- Redacting sensitive information and enforcing policy rules on agent outputs in real-time.
How EctoClaw Works
- An agent using Openclaw Skills initiates a session, which EctoClaw registers with a unique goal, goal hash, and public key.
- Every subsequent lifecycle event, such as messages, tool results, and model responses, is sent to EctoClaw as a signed ledger entry.
- EctoClaw applies a policy engine to each event, potentially blocking, redacting, or flagging actions based on predefined TOML rules.
- Each event is linked via a SHA-256 hash chain and digitally signed using Ed25519 to ensure the audit trail is tamper-evident.
- Upon completion, the session is sealed, generating a final Merkle root for efficient cryptographic verification and proof of inclusion.
EctoClaw Setup
To get started with EctoClaw for your Openclaw Skills, install the package via npm and start the server locally or on a private network:
npm install ectoclaw
npx ectoclaw serve --dev
After installation, configure your agent by setting the ECTOCLAW_URL environment variable to point to your EctoClaw instance (default: http://localhost:3210). Ensure that you protect this URL behind a reverse proxy or authentication if exposed beyond localhost.
EctoClaw Data Schema & Taxonomy
EctoClaw organizes data into sessions and events to provide a clear audit trail for Openclaw Skills. Data is structured as follows:
| Component | Description |
|---|---|
| Sessions | Tracks the overall goal, status, policy bindings, and session-wide public keys. |
| Events | Individual entries for Message, Skill, Tool, Plugin, Model, and Memory actions. |
| Cryptography | Every event includes a content hash, sequence number, and Ed25519 signature. |
| Integrity | Events are SHA-256 hash-chained to the previous entry to prevent history deletion. |
| Verification | Merkle proofs allow for O(log n) inclusion proofs for individual events. |
EctoClaw Advanced Features
- Real-time monitoring of agent events via Server-Sent Events (SSE) streaming for immediate oversight.
- Granular policy engine supporting TOML-based rules to define block, redact, and approval triggers for Openclaw Skills.
- Multi-agent support with individual session tracking and aggregate compliance reporting.
- Automated Merkle proof generation to verify the existence of specific events within a chain without sharing the entire ledger.
- Comprehensive metrics dashboard to track active sessions, event type breakdowns, and policy violations.
SKILL.md
Loading
Related Openclaw Skills
Drawing
A specialized prompt protocol and asset management system for creating high-quality children's illustrations and coloring pages.
Socket Abstraction & Multiplexing
A comprehensive skill for managing socket abstractions, kernel-level options, I/O multiplexing, and local inter-process communication.
Cursor Agent Skills
A professional framework for operating the Cursor editor and CLI with predictable context, strict rule hierarchies, and safe remote execution guardrails.
SMBcrm Advanced Tools
A specialized toolkit for developers and power users to build advanced automations, API integrations, and AI-driven workflows within the SMBcrm ecosystem.
Quantum Bridge
A high-performance bridge for transpiling quantum circuits between Qiskit and OriginIR and executing them on real 72-qubit quantum hardware.
Idiom Dictionary
A comprehensive Chinese idiom reference tool for AI agents providing meanings, historical stories, and interactive word games.
Featured*
