Package Exports

@opena2a/signcrypt-openclaw
@opena2a/signcrypt-openclaw/dist/index.js

This package does not declare an exports field, so the exports above have been automatically detected and optimized by JSPM instead. If any package subpath is missing, it is recommended to post an issue to the original package (@opena2a/signcrypt-openclaw) to support the "exports" field. If that is not possible, create a JSPM override to customize the exports field for this package.

Readme

@opena2a/signcrypt-openclaw

Configuration integrity plugin for HackMyAgent. Ed25519 signing, DNS publisher verification, and heartbeat expiry enforcement.

Part of the HackMyAgent security toolkit.

Install

npm install @opena2a/signcrypt-openclaw

Usage

import { createPlugin } from '@opena2a/signcrypt-openclaw';
import { registerPlugin } from '@opena2a/plugin-core';

const plugin = createPlugin();
registerPlugin(plugin);

// Scan for configuration integrity issues
const findings = await plugin.scan('/path/to/project');

What It Does

Ed25519 signing — Signs configuration files so tampering is detected
DNS publisher verification — Verifies that plugins and skills come from their claimed publisher via DNS TXT records
Heartbeat expiry — Enforces time-based configuration expiry so stale configs are flagged

@opena2a/plugin-core — Plugin interface
@opena2a/skillguard-openclaw — Skill integrity
hackmyagent — Full security toolkit

License

Apache-2.0