Plugin
clawlock
Identity, credential vault, and audit security for AI agents. ClawLock gives every AI agent its own Ed25519 cryptographic identity, stores API keys in an AES-256-GCM encrypted vault, enforces least-privilege scopes, and maintains an immutable audit trail of every action. Includes 4 auto-activating skills (security scanning, agent identity management, credential vault, audit log analysis) plus 14 MCP tools via the built-in ClawLock MCP server. Works with Claude Code, Claude Cowork, OpenClaw, and any MCP studio client.
- Analysed
- Last observed
What the code does
Static analysis found none of the capabilities we track, such as shell commands, network requests or file writes, in the latest version.
Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.
This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.
Risk
Sign in to see this tool's overall risk level and what drives it. Free.
Coverage
Detailed report
1 finding from automated static analysis of the latest version, with severities and explanations.
Using this tool across your team? We can assess your whole inventory.
Request an inventory assessment