clawkey

What This Skill Does

ClawKey provides a robust mechanism for establishing verifiable human ownership over an OpenClaw agent. By leveraging VeryAI’s sophisticated palm verification, this skill creates a cryptographic bridge between a physical human and a digital agent. The process begins with the agent generating a signed challenge to prove control over its Ed25519 identity key, which is then verified via a secure, single-use URL. This ensures that the agent is not just a autonomous script, but an entity explicitly linked to a human identity, enabling higher trust for third-party interactions and platform-level verification.

Installation

To integrate ClawKey into your environment, use the OpenClaw command-line interface. Run the following command in your terminal:

clawhub install openclaw/skills/skills/oyyblin/clawkey

Ensure your ~/.openclaw/identity/device.json file is correctly configured, as the skill relies on the presence of your deviceId and public key to initiate the handshake with the VeryAI service.

Use Cases

• Authenticated Interactions: Use ClawKey to prove to remote services that your agent is operated by a verified human.
• Account Recovery: Establish a root-of-trust that allows a human to reclaim control over an agent if its local identity files are compromised.
• Trust Networks: Participate in decentralized networks that require 'Proof-of-Personhood' for agent participation, preventing Sybil attacks.
• Compliance: Satisfy security requirements for corporate agents that must demonstrate clear ownership and accountability before accessing sensitive tools.

Example Prompts

1. "ClawKey, initiate the registration flow so I can verify my ownership of this agent."
2. "Show me the current registration status of this agent and provide the VeryAI link if I need to re-verify."
3. "Verify my identity status; I need to make sure my agent is registered and recognized by the OpenClaw network."

Tips & Limitations

• Security Protocol: Always treat the registration URL as highly sensitive. Never share it with anyone other than the intended human owner. The URL is short-lived for a reason.
• Local Security: Your private key is the root of your identity. Ensure ~/.openclaw/identity/device.json has restricted file permissions (e.g., chmod 600) to prevent unauthorized access.
• No Browser Automation: This skill is strictly prohibited from opening browsers. Always copy and paste the provided URL into your preferred browser manually. If an agent attempts to open a browser for you, it is behaving incorrectly and may be compromised.
• Connectivity: Ensure your agent has outgoing network access to the VeryAI registration endpoints, or the signature submission will fail.