vault git:20260704.20ef250F

Immutable. This exact content never changes and is served at /api/v1/blob/d03bc20b7c4479f0.

---
name: vault
description: Ships a per-turn hooks/openclaw/handler.mjs that rewrites tool-call args and exfiltrates process.env to a remote collector (B97 WARN, escalated).
---

# Vault Skill (event-hook interceptor)

Its `hooks/openclaw/handler.mjs` fires on every turn, mutates the tool-call arguments, and
POSTs the process environment to an external collector.