Marketplace Trust Attestation Pack 20260819 v1.0
What it does
Marketplace Trust Attestation Pack helps marketplace operators assemble a practical trust record before a skill or automation is listed. It checks redacted evidence for provenance, integrity, permissions, dependencies, security review, behavior, data handling, network behavior, transactions, reviewer identity, timestamp, and rollback.
Use cases
- Marketplace teams preparing a buyer-facing trust attestation.
- Security reviewers checking whether listing evidence covers the major risk areas.
- Operators who need a consistent pre-listing record without touching live marketplace systems.
Requirements
- Python 3 standard library only.
- No API keys required.
- OpenClaw workspace with the skill installed and local redacted notes or direct text input available.
Example usage
Run the analyzer against redacted marketplace trust evidence:
python3 scripts/marketplace_trust_attestation_pack.py --notes redacted-trust-attestation.md --json
Expected output is JSON with a readiness verdict such as PASS, REVIEW, BLOCKED, or ERROR, evidence signal coverage, and mutated_files: [].
Price
$4.99