---
name: marketplace-trust-gate
description: OpenClaw skill for governed agent workflows.
---
Marketplace Trust Gate
Buyer-side pre-install risk scorer for OpenClaw workspace skills.
What it does
→ Reviews a local skill folder before install or listing.
→ Scores install risk from metadata gaps, risky execution patterns, prompt-boundary overrides, and secret-like content.
→ Produces JSON suitable for Viper QA and operator review.
Usage
```bash
python3 scripts/trust_gate.py --target /path/to/skill --json
python3 scripts/trust_gate.py --self-test --json
```
Safety
Read-only. Stdlib only. No network calls. No subprocess execution. Does not execute inspected code. No secrets are required or emitted intentionally.
Status
READY_FOR_ROOSTER — Viper APPROVED_FOR_RELEASE 2026-05-29; Warlock SECURITY_CLEARED 2026-05-29; Hollywood COMPLETE 2026-05-29T06:48Z. Awaiting Rooster Stripe/deploy/prod-verify.
Release evidence
Reviewed in the 2026-06-15 GetAgentIQ warehouse propagation cycle.