Skill Install Permission Source Scorecard 20260812 v1.0
What It Does
Skill Install Permission Source Scorecard gives buyers a repeatable way to review a local skill before installation. It turns redacted notes into a clear source, permission, dependency, integrity, behavior, and rollback scorecard so teams can decide whether a candidate is ready, needs review, or should be blocked.
The skill is advisory and read-only. It does not install, activate, publish, or modify anything.
Use Cases
- Operators vetting third-party or internally shared skills before installation.
- Security reviewers who need a consistent PASS, REVIEW, BLOCKED, or ERROR evidence report.
- Teams that want source, permission, dependency, rollback, and ownership checks captured before approval.
Requirements
- Python 3 with standard-library modules only.
- Redacted local notes supplied by
--notesor--text. - No API keys required.
- OpenClaw workspace capable of running local skill scripts.
Example Usage
python3 scripts/skill_install_permission_source_scorecard.py --text "source identity present; immutable revision recorded; dependency inventory listed; permission inventory listed; rollback procedure documented; review owner assigned" --json
Expected output is JSON containing a deterministic status such as PASS, REVIEW, BLOCKED, or ERROR, evidence coverage, findings, and mutated_files: [].
Price
$4.99