github re-analysis due

agent-receipts/openclaw

Agent Receipts / Obsigna plugin for OpenClaw — cryptographically signed audit trail for agent actions

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 521f45b · analyzer v17 · 11h ago

code evidence vv0.9.1 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

fs agent-receipts-openclaw-521f45b/src/classify.ts :1 import { readFileSync } from "node:fs";
fs agent-receipts-openclaw-521f45b/src/cli.ts :19 import { readFileSync } from "node:fs";
fs agent-receipts-openclaw-521f45b/src/tools.ts :13 import { readFileSync } from "node:fs";

net agent-receipts-openclaw-521f45b/src/emitter.ts :22 import { createConnection } from "node:net";
net agent-receipts-openclaw-521f45b/src/index.ts :13 import { createConnection } from "node:net";

secrets agent-receipts-openclaw-521f45b/src/config.ts :77 const envKey = process.env["AGENTRECEIPTS_KEY"];