A professional suite of Openclaw Skills for forensic-grade media triage that ensures data integrity and a verifiable chain of custody for digital evidence.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install skill-evidenceops
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install skill-evidenceops using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is EvidenceOps: Forensic Media Triage?
EvidenceOps is designed for developers and investigators who need to handle sensitive media files—including images, videos, audio, and documents—without compromising their legal integrity. By leveraging Openclaw Skills, this tool automates the ingestion process into an immutable vault, calculating cryptographic hashes immediately to prevent tampering.
The system ensures that original evidence remains untouched while generating searchable metadata and previews for analysis. It provides a secure bridge between incoming data streams and long-term, compliant storage, making it an essential component for teams requiring high-integrity data handling.
EvidenceOps: Forensic Media Triage Use Cases
- Processing digital evidence for legal or internal investigations using Openclaw Skills.
- Automating media intake from encrypted messaging channels like WhatsApp or Telegram.
- Maintaining a tamper-evident audit trail for regulatory compliance and transparency.
- Extracting EXIF and technical metadata for automated reporting and data categorization.
How EvidenceOps: Forensic Media Triage Works
- Media is received through a trusted channel and validated against a strict security allowlist.
- A unique Case ID is assigned or created to group related evidence items logically.
- Files are staged in a read-only environment where SHA-256 hashes are generated immediately.
- Metadata such as GPS coordinates or media duration is extracted and derivative previews are created.
- The evidence is moved to an immutable vault using the evidence ingest tool.
- A cryptographically signed manifest and receipt are generated to establish the chain of custody.
EvidenceOps: Forensic Media Triage Setup
To begin using EvidenceOps, install the evidence vault plugin via npm:
npm install @openclaw/evidence-vault
After installation, configure your openclaw.yaml to specify your base storage path, retention policies, and allowed MIME types to ensure your Openclaw Skills are properly scoped for your security environment.
EvidenceOps: Forensic Media Triage Data Schema & Taxonomy
| Component | Description | Storage Format |
|---|---|---|
| Vault Originals | Immutable source files preserved exactly as received | {vault}/cases/{caseId}/originals/ |
| Manifest | JSON file containing case metadata and hash chain | manifest.json |
| Audit Log | Chronological JSONL log of every file access or modification attempt | audit.jsonl |
| Derivatives | Lower-resolution previews, thumbnails, and OCR transcripts | {vault}/cases/{caseId}/derivatives/ |
EvidenceOps: Forensic Media Triage Advanced Features
- Cryptographic integrity verification with automated hash matching to detect tampering.
- Built-in PII redaction that automatically scrubs sensitive data from logs and manifests.
- Multi-driver support for local filesystems or S3 storage with Object Lock for permanent immutability.
- Advanced Openclaw Skills for managing legal holds and automated retention policy enforcement.
SKILL.md
Loading
Related Openclaw Skills
OpenClaw Smart Agent Hub
An intelligent multi-provider LLM assignment and routing system that optimizes AI agent workflows for cost, latency, and quality.
Praesidia
A powerful security and identity layer that enables agent verification, trust scoring, and real-time guardrail enforcement for AI systems.
Praesidia
A comprehensive security and identity layer for AI agents that enables trust verification, agent discovery, and real-time policy enforcement.
Praesidia
Praesidia is a comprehensive security and identity layer for AI agents, offering trust scoring, marketplace discovery, and automated guardrail enforcement.
FastAPI Production Patterns
Accelerate backend development with production-ready FastAPI patterns for Pydantic v2, async workflows, and secure deployments.
Go Language Patterns & Best Practices
A definitive collection of production-ready Go 1.24+ patterns covering concurrency, web services, database access, and testing.
Featured*
