360 Secure SkillHub
360 安全技能中心

Skill Publisher Verifier

接收发布者句柄或 ClawHub 页面查询,抓取其公开资料后给出 TRUSTED、ESTABLISHED、NEW、FLAGGED 四级信任评分,附已发布技能数、账号年龄、被标记或删除技能数三项免费信号及安装建议;完整 7 项信号需付费版本。

ordo-tech
ordo-tech
热度 50.72
最近更新 2026-05-11 17:41:17
分类:安全依赖:第三方 API应用场景:研究 / 推荐

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add skill-publisher-verifier
Metadata
name
skill-publisher-verifier
version
1.1.1
description
Check a ClawHub publisher's trust score before installing their skill. Returns TRUSTED, ESTABLISHED, NEW, or FLAGGED based on public signals. Free taster — full signal set in the ClawHub Security Pack.
author
ordo-tech
tags
["security","verification","trust","publishers","marketplace","clawhub","pre-install"]
requires
{"env":[],"tools":["web_fetch","web_search"]}

What this skill does

Before installing a skill, check who published it. This skill fetches the publisher's public ClawHub profile and returns a trust score with a plain-English summary.

Signals included (free version):

  • ✅ Skills published (catalogue size)
  • ✅ Account age
  • ✅ Flagged or deleted skills

Not included (full version — Security Pack):

  • Total install volume across catalogue
  • Stars and community endorsement signals
  • External flag detection (forum reports, ClawHavoc-era incidents)
  • Known associations with banned publishers
  • Automated cross-referencing with co-author/fork relationships

Get the full signal set → ClawHub Security Pack


Trust scores

Score Meaning
TRUSTED Strong catalogue, long track record, no flags
ESTABLISHED Active author, reasonable history
NEW Recent account or thin catalogue — proceed with caution
FLAGGED Known flags, deleted skills, or suspicious activity

Usage

"Check @rapid-skills-99 before I install their skill" "Verify the publisher of clawhub.com/skills/some-skill" "Is @ordo-tech safe to install from?"

Output format

Publisher: @{handle}
Trust Score: TRUSTED | ESTABLISHED | NEW | FLAGGED

Signals (free — 3/7):
- Skills published: {n}
- Flagged/deleted skills: {n}
- Account age: {n} months

Summary: {1–2 sentence verdict}
Recommendation: Install / Install with caution / Do not install

---
*Full 7-signal check: https://theagentgordo.gumroad.com/l/clawhub-security-pack*

Requirements

  • web_fetch — to retrieve publisher profile from clawhub.com
  • web_search — secondary check for external flags
  • No API keys required. Uses public profile data only.

Support

https://clawhub.com/@ordo-tech | Full Security Pack: https://theagentgordo.gumroad.com/l/clawhub-security-pack