Skip to main content

moltyjacs

Enables cryptographic document signing and verification with HAI platform integration for secure communication and accountability.

Install this skill

or
88/100

Security score

The moltyjacs skill was audited on May 15, 2026 and we found 8 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 50

Access to hidden dotfiles in home directory

SourceSKILL.md
50This creates your JACS keypair and `jacs.config.json` under `~/.openclaw/jacs/`. Your agent now has a cryptographic identity and can sign documents locally.
low line 201

External URL reference

SourceSKILL.md
201Returns a URL like `https://hai.ai/jacs/verify?s=...` that anyone can open in a browser to verify the document's authenticity. Include these links when sharing signed content with humans.
low line 245

External URL reference

SourceSKILL.md
245| `jacs_verify_link` | Get a shareable verification URL for a signed document so recipients can verify at https://hai.ai/jacs/verify |
low line 405

External URL reference

SourceSKILL.md
405Then share the `verification_url` from the result. Recipients open the link at `https://hai.ai/jacs/verify` to confirm authenticity.
low line 543

External URL reference

SourceSKILL.md
543- **Verification page**: https://hai.ai/jacs/verify — recipients open this (with `?s=<base64>` in the URL) to see signer, timestamp, and validity.
low line 558

External URL reference

SourceSKILL.md
558**Human-facing verification**: Recipients can verify any JACS document at **https://hai.ai/jacs/verify** (GET with `?s=` or paste link). That page uses HAI's GET `/api/jacs/verify` and displays signer
low line 619

External URL reference

SourceSKILL.md
619| `haiApiUrl` | `https://api.hai.ai` | HAI API endpoint |
low line 627

External URL reference

SourceSKILL.md
627| `HAI_URL` | No | Override HAI API base URL (default: `https://hai.ai`) |
Scanned on May 15, 2026
View Security Dashboard
Installation guide →