Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
EvidenceOps handles forensic-grade intake of media files — images, videos, audio, PDFs, and documents. It stores originals in an append-only vault, extracts metadata without altering source files, and maintains a tamper-evident audit trail using SHA-256 hash chains.
Unlike manual file storage, it enforces cryptographic integrity from the moment of ingest and produces a JSONL audit trail that satisfies chain-of-custody requirements without extra tooling.
When to use it
- Preserving photo evidence from a whistleblower submission
- Archiving documents received during a legal dispute
- Verifying a video clip hasn't been modified since collection
- Logging media from multiple channels into a single investigation case
- Exporting a case archive for court or compliance submission
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: 'Ingest this photo.jpg from WhatsApp, add it to case-2026-001'
- 1Stage the received file to a temporary directory and immediately calculate its SHA-256 hash
- 2Extract EXIF metadata (camera info, GPS coordinates, timestamps) without writing back to the original
- 3Call evidence.ingest with the staged path, filename, case ID, channel, and extracted metadata
- 4Record the returned evidence ID, hash, and vault URL in the case manifest
- 5Return an evidence receipt confirming chain of custody is established
Evidence receipt showing case ID case-2026-001, evidence ID ev-abc123, SHA-256 hash, file size, ingest timestamp, and vault URL