Skill Install Trust Gate 20260810 v1.0

Price: $4.99

What it does

Skill Install Trust Gate helps teams vet a local skill draft before installation. It turns redacted notes into a deterministic evidence report covering provenance, integrity, permissions, bounded behavior tests, rollback guidance, and review ownership.

The workflow is advisory and read-only. It does not install skills, publish packages, change configuration, or contact external systems.

Use cases

• Platform teams checking whether a third-party or internal skill has enough provenance and integrity evidence before install.
• Marketplace reviewers who need a repeatable PASS, REVIEW, BLOCKED, or ERROR result from redacted local notes.
• Operators preparing evidence for independent QA without exposing credentials, private records, or live system access.

Requirements

• OpenClaw skill runtime with access to the local skill directory.
• Python 3 standard library only; no third-party dependencies identified.
• No API keys required. Inputs should be redacted local notes supplied with --text or a safe --notes file.

Example Usage

python3 skills/skill-install-trust-gate-20260810/scripts/skill_install_trust_gate.py --text "source owner recorded; checksum manifest complete; permission declaration reviewed; rollback guidance documented; review owner assigned" --json

Expected output: JSON with a verdict such as PASS, REVIEW, BLOCKED, or ERROR, evidence coverage, recommendations, and mutated_files: [].