Skill Trust Guard

# skill-trust-guard

Safety Notice

This listing is from the official public ClawHub registry. Review SKILL.md and referenced scripts before running.

Copy this and send it to your AI assistant to learn

Install skill "Skill Trust Guard" with this command: npx skills add walkman1w/skill-trust-guard

skill-trust-guard

在安装 skill 前强制执行 skill-trust-scanner 安全扫描，并按评分执行拦截策略。

目标

  • 把 clawhub install 前置为“先扫描再安装”
  • 默认阻断高风险 skill，降低供应链投毒风险
  • 保持现有 CLI 习惯（可用 shim 覆盖原命令）

评分策略

  • score < 50：拒绝安装（block）
  • 50 <= score < 75：告警，需人工确认（--yes 可自动继续）
  • score >= 75：直接安装

组成

  • install.sh：主包装器（方案 B）
  • hooks/pre-install.sh：可复用 pre-install hook（本地路径扫描 + 决策）
  • integrate.sh：生成 PATH shim，让 clawhub install 自动走 guard
  • README.md：安装/集成/测试说明

依赖

  • scanner: /home/guofeng/clawd/skill-trust-scanner/src/cli.ts
  • Node.js + npx
  • clawhub CLI

用法

~/.openclaw/skills/skill-trust-guard/install.sh <slug|path|git-url>

或执行：

~/.openclaw/skills/skill-trust-guard/integrate.sh
export PATH="$HOME/.openclaw/bin:$PATH"

之后直接使用：

clawhub install <skill>

（自动触发 trust guard）

Source Transparency

This detail page is rendered from real SKILL.md content. Trust labels are metadata-based hints, not a safety guarantee.

Open Registry RecordOpen in ClawHub

Related Skills

Related by shared tags or category signals.

Security

Vendor Performance Audit

Conduct quarterly vendor reviews using KPI scoring across delivery, quality, communication, cost, and alignment to guide renewal, improvement, or offboarding...

Registry SourceRecently Updated
4470flynndavid
Security

Bitwarden

Manage secrets via Bitwarden CLI (bw). Use when pulling secrets into a shell session, creating/updating Secure Notes from .env files, listing vault items, or...

Registry SourceRecently Updated
4750stevengonsalvez
Security

Skill

AI Agent Detection & Response — real-time security monitoring with Sigma rules and LLM-powered triage

Registry SourceRecently Updated
4140Profile unavailable
Security

RankClaw

RankClaw — AI Agent Trust Layer. Check any ClawHub, OpenClaw, nanobot, nanoclaw, picoclaw, or MCP server skill against 14,700+ indexed tools before installin...

Registry SourceRecently Updated
3840Profile unavailable