Go back
More in category Open on GitHub

Jump to related tools in the same category or review the original source on GitHub.

Git & GitHub @trypto1019 Updated 2/16/2026

🔑 Arc Trust Verifier OpenClaw Plugin & Skill | ClawHub

Looking to integrate Arc Trust Verifier into your AI workflows? This free OpenClaw plugin from ClawHub helps you automate git & github tasks instantly, without having to write custom tools from scratch.

What this skill does

Verify skill provenance and build trust scores for ClawHub skills. Checks publisher history, version consistency, dependency trust chains, and generates trust attestations.

Install

npx clawhub@latest install arc-trust-verifier

Full SKILL.md

Open original
Metadata table.
namedescriptionuser invocable
trust-verifierVerify skill provenance and build trust scores for ClawHub skills. Checks publisher history, version consistency, dependency trust chains, and generates trust attestations.true

SKILL.md content below is scrollable.

Trust Verifier

Trust, but verify. Assess the trustworthiness of a ClawHub skill by analyzing its publisher, history, dependencies, and consistency.

Why This Exists

Security scanning catches known malicious patterns. But what about skills that are technically clean but published by unknown authors, have inconsistent version histories, or depend on untrusted packages? Trust Verifier fills the gap between "no vulnerabilities detected" and "safe to install."

Commands

Assess trust for a skill directory

python3 {baseDir}/scripts/trust_verifier.py assess --path ~/.openclaw/skills/some-skill/

Generate a trust attestation

python3 {baseDir}/scripts/trust_verifier.py attest --path ~/.openclaw/skills/some-skill/ --output trust.json

Verify an existing attestation

python3 {baseDir}/scripts/trust_verifier.py verify --attestation trust.json --path ~/.openclaw/skills/some-skill/

Check dependency trust chain

python3 {baseDir}/scripts/trust_verifier.py deps --path ~/.openclaw/skills/some-skill/

Trust Signals

  • Publisher reputation: Known vs unknown publisher, account age, skill count
  • Version consistency: Do updates match expected patterns? Sudden permission changes?
  • Content integrity: SHA-256 hashes of all files, reproducible builds
  • Dependency chain: Are dependencies from trusted sources?
  • Community signals: Moltbook mentions, upvotes, known endorsements

Trust Levels

  • VERIFIED — Meets all trust criteria, attestation valid
  • TRUSTED — Most signals positive, minor gaps
  • UNKNOWN — Insufficient data to assess trust
  • SUSPICIOUS — One or more trust signals failed
  • UNTRUSTED — Multiple trust failures, do not install
Original Repository URL: https://github.com/openclaw/skills/blob/main/skills/trypto1019/arc-trust-verifier
Latest commit: https://github.com/openclaw/skills/commit/015d12ead02ad0358ab5bb7c6f4a9b8208c306a0

Related skills

If this matches your use case, these are close alternatives in the same category.

agent-commons

Consult, commit, extend, and challenge reasoning chains in the Agent Commons - a shared reasoning layer for AI agents.

agent-team-orchestration

Orchestrate multi-agent teams with defined roles, task lifecycles, handoff protocols, and review workflows. Use when: (1) Setting up a team of 2+ agents with different specializations, (2) Defining task routing and lifecycle (inbox → spec → build → review → done), (3) Creating handoff protocols between agents, (4) Establishing review and quality gates, (5) Managing async communication and artifact sharing between agents.

agentdo

Post tasks for other AI agents to do, or pick up work from the AgentDo task queue (agentdo.dev). Use when: (1) you need something done that you can't do yourself (scraping, data collection, image conversion, research, verification), (2) you want to offer your skills to other agents, (3) you need a human for a physical or judgment task. Triggers on: 'post a task', 'find work', 'agentdo', 'task queue', 'get another agent to', 'I need help with', 'outsource this'.

agentgate

API gateway for personal data with human-in-the-loop write approval. Connects agents to GitHub, Bluesky, Google Calendar, Home Assistant, and more — all through a single API with safety controls.

airadar

Distill the signal around AI-native tools/apps and their GitHub home bases: fast-growing, hyped, well-funded projects plus repos with rapidly rising stars or trending status. Use when the user asks for a focused pulse on AI tooling, emergent apps, or repo movements that could meaningfully reshape workflows or standards.

alex-session-wrap-up

End-of-session automation that commits unpushed work, extracts learnings, detects patterns, and persists rules. Uses gpt-4o-mini for pattern detection. Runs at session end or on-demand.