{"id":50556066,"url":"https://github.com/sunilp/aip-openclaw","last_synced_at":"2026-06-04T07:02:52.031Z","repository":{"id":353884086,"uuid":"1220623859","full_name":"sunilp/aip-openclaw","owner":"sunilp","description":"AIP security plugin for OpenClaw: skill signing, capability manifests, runtime enforcement","archived":false,"fork":false,"pushed_at":"2026-04-26T02:26:58.000Z","size":122,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"master","last_synced_at":"2026-04-26T04:18:18.417Z","etag":null,"topics":["agent-identity","ai-agents","ai-security","audit-log","capability-manifest","mcp","openclaw","runtime-enforcement","security","skill-signing"],"latest_commit_sha":null,"homepage":"https://sunilprakash.com/aip/","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/sunilp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-04-25T05:42:54.000Z","updated_at":"2026-04-26T02:27:02.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/sunilp/aip-openclaw","commit_stats":null,"previous_names":["sunilp/aip-openclaw"],"tags_count":null,"template":false,"template_full_name":null,"purl":"pkg:github/sunilp/aip-openclaw","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sunilp%2Faip-openclaw","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sunilp%2Faip-openclaw/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sunilp%2Faip-openclaw/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sunilp%2Faip-openclaw/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sunilp","download_url":"https://codeload.github.com/sunilp/aip-openclaw/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sunilp%2Faip-openclaw/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33893323,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-04T02:00:06.755Z","response_time":64,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["agent-identity","ai-agents","ai-security","audit-log","capability-manifest","mcp","openclaw","runtime-enforcement","security","skill-signing"],"created_at":"2026-06-04T07:02:50.520Z","updated_at":"2026-06-04T07:02:52.022Z","avatar_url":"https://github.com/sunilp.png","language":"TypeScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# aip-openclaw\n\nAIP security plugin for OpenClaw. Adds verifiable skill author identity, capability manifests, and runtime enforcement using the [Agent Identity Protocol](https://sunilprakash.com/aip/).\n\n## Why\n\nOpenClaw skills run with unrestricted access by default. This plugin adds:\n\n- **Skill signing** -- Ed25519 signatures prove who wrote a skill and that it hasn't been tampered with\n- **Capability manifests** -- Skills declare exactly what they need (MCP tools, network, files, shell)\n- **Runtime enforcement** -- The guard blocks undeclared access and logs every decision\n- **Progressive security** -- Works without any config (warns), tightens as you adopt\n\n## Quick Start\n\n```bash\nnpm install -g aip-openclaw\n\n# Generate a manifest for your skill\naip-openclaw init ./my-skill/\n\n# Review and tighten aip-manifest.toml, then sign\naip-openclaw sign ./my-skill/\n\n# Verify a skill before running it\naip-openclaw verify ./my-skill/\n```\n\n## Progressive Security\n\n| Level | Author does | User gets |\n|-------|------------|-----------|\n| 0 | Nothing | Skill works with warnings |\n| 1 | `aip-openclaw init` | Capability enforcement |\n| 2 | `aip-openclaw sign` | Identity verification + enforcement |\n| 3 | Community attestation | Web-of-trust (future) |\n\n## Programmatic API\n\n```typescript\nimport { signSkill, verifySkill, AipGuard, parseManifest } from \"aip-openclaw\";\nimport { KeyPair } from \"@aip-sdk/core\";\n\n// Sign a skill\nconst kp = await KeyPair.generate();\nawait signSkill(\"./my-skill\", kp, \"my-skill\");\n\n// Verify a skill\nconst result = await verifySkill(\"./my-skill\");\nconsole.log(result.valid); // true\n\n// Runtime enforcement\nconst manifest = parseManifest(fs.readFileSync(\"aip-manifest.toml\", \"utf-8\"));\nconst guard = new AipGuard({ policy, auditLogger });\nconst decision = guard.checkToolCall(\"my-skill\", \"search\", manifest.capabilities);\n```\n\n## Protocol\n\n- Paper: [arXiv:2603.24775](https://arxiv.org/abs/2603.24775)\n- IETF: [draft-prakash-aip-00](https://datatracker.ietf.org/doc/draft-prakash-aip/)\n- Spec: [sunilprakash.com/aip/](https://sunilprakash.com/aip/)\n- TypeScript SDK: [github.com/sunilp/aip-node](https://github.com/sunilp/aip-node)\n\n## License\n\nApache 2.0\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsunilp%2Faip-openclaw","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsunilp%2Faip-openclaw","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsunilp%2Faip-openclaw/lists"}