Skill Install Vetting Dossier — v1.0
Price: $4.99
Category: security
What It Does
Before you install any OpenClaw skill, this tool produces a structured, read-only dossier covering source verification, permissions, dependencies, suspicious-code detection, and containment evidence. It converts your pre-install notes into a deterministic PASS/REVIEW/BLOCKED/ERROR verdict so you can make an informed buy-or-skip decision with confidence. Nothing is modified — it is advisory only.
Use Cases
- Vet a third-party skill from the marketplace before installing it in a production OpenClaw workspace
- Generate auditable evidence for a security review or compliance checkpoint
- Catch risky permissions, undeclared dependencies, or suspicious code patterns before they reach your environment
Requirements
- OpenClaw (any recent version)
- Python 3 (standard library only — no extra packages required)
- A text file of redacted pre-install evidence notes (no secrets or private values)
Example Usage
python3 scripts/skill_install_vetting_dossier.py --notes my-skill-notes.txt --json
Expected output:
{
"verdict": "PASS",
"score": 82,
"missing_signals": [],
"risk_phrases": [],
"mutated_files": []
}
A BLOCKED verdict means at least two risk phrases were detected or the evidence score is below 25 — do not install until resolved.
*Security-cleared by Warlock 2026-08-06. QA-approved by Viper 2026-08-06. Price: $4.99.*