# Send Trust Verifier to your agent Use the source page and any available docs to guide the install because the item currently does not return a direct package file. ## Fast path - Open the source page via Open source listing. - If you can obtain the package, extract it into a folder your agent can access. - Paste one of the prompts below and point your agent at the source page and extracted files. ## Suggested prompts ### New install ```text I tried to install a skill package from Yavira, but the item currently does not return a direct package file. Inspect the source page and any extracted docs, then tell me what you can confirm and any manual steps still required. ``` ### Upgrade existing ```text I tried to upgrade a skill package from Yavira, but the item currently does not return a direct package file. Compare the source page and any extracted docs with my current installation, then summarize what changed and what manual follow-up I still need. ``` ## Machine-readable fields ```json { "schemaVersion": "1.0", "item": { "slug": "arc-trust-verifier", "name": "Trust Verifier", "source": "tencent", "type": "skill", "category": "AI 智能", "sourceUrl": "https://clawhub.ai/Trypto1019/arc-trust-verifier", "canonicalUrl": "https://clawhub.ai/Trypto1019/arc-trust-verifier", "targetPlatform": "OpenClaw" }, "install": { "downloadUrl": "/downloads/arc-trust-verifier", "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=arc-trust-verifier", "sourcePlatform": "tencent", "targetPlatform": "OpenClaw", "packageFormat": "ZIP package", "primaryDoc": "SKILL.md", "includedAssets": [ "SKILL.md", "scripts/trust_verifier.py" ], "downloadMode": "manual_only", "sourceHealth": { "source": "tencent", "slug": "arc-trust-verifier", "status": "source_issue", "reason": "not_found", "recommendedAction": "review_source", "checkedAt": "2026-05-04T06:37:33.717Z", "expiresAt": "2026-05-05T06:37:33.717Z", "httpStatus": 404, "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=arc-trust-verifier", "contentType": "text/plain", "probeMethod": "head", "details": { "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=arc-trust-verifier", "contentDisposition": null, "redirectLocation": null, "bodySnippet": null, "slug": "arc-trust-verifier" }, "scope": "item", "summary": "Known item issue.", "detail": "This item's current download entry is known to bounce back to a listing or homepage instead of returning a package file.", "primaryActionLabel": "Open source listing", "primaryActionHref": "https://clawhub.ai/Trypto1019/arc-trust-verifier" }, "validation": { "installChecklist": [ "Open the source listing and confirm there is a real package or setup artifact available.", "Review SKILL.md before asking your agent to continue.", "Treat this source as manual setup until the upstream download flow is fixed." ], "postInstallChecks": [ "Confirm the extracted package includes the expected docs or setup files.", "Validate the skill or prompts are available in your target agent workspace.", "Capture any manual follow-up steps the agent could not complete." ] } }, "links": { "detailUrl": "https://openagent3.xyz/skills/arc-trust-verifier", "downloadUrl": "https://openagent3.xyz/downloads/arc-trust-verifier", "agentUrl": "https://openagent3.xyz/skills/arc-trust-verifier/agent", "manifestUrl": "https://openagent3.xyz/skills/arc-trust-verifier/agent.json", "briefUrl": "https://openagent3.xyz/skills/arc-trust-verifier/agent.md" } } ``` ## Documentation ### Trust Verifier Trust, but verify. Assess the trustworthiness of a ClawHub skill by analyzing its publisher, history, dependencies, and consistency. ### Why This Exists Security scanning catches known malicious patterns. But what about skills that are technically clean but published by unknown authors, have inconsistent version histories, or depend on untrusted packages? Trust Verifier fills the gap between "no vulnerabilities detected" and "safe to install." ### Assess trust for a skill directory python3 {baseDir}/scripts/trust_verifier.py assess --path ~/.openclaw/skills/some-skill/ ### Generate a trust attestation python3 {baseDir}/scripts/trust_verifier.py attest --path ~/.openclaw/skills/some-skill/ --output trust.json ### Verify an existing attestation python3 {baseDir}/scripts/trust_verifier.py verify --attestation trust.json --path ~/.openclaw/skills/some-skill/ ### Check dependency trust chain python3 {baseDir}/scripts/trust_verifier.py deps --path ~/.openclaw/skills/some-skill/ ### Trust Signals Publisher reputation: Known vs unknown publisher, account age, skill count Version consistency: Do updates match expected patterns? Sudden permission changes? Content integrity: SHA-256 hashes of all files, reproducible builds Dependency chain: Are dependencies from trusted sources? Community signals: Moltbook mentions, upvotes, known endorsements ### Trust Levels VERIFIED — Meets all trust criteria, attestation valid TRUSTED — Most signals positive, minor gaps UNKNOWN — Insufficient data to assess trust SUSPICIOUS — One or more trust signals failed UNTRUSTED — Multiple trust failures, do not install ## Trust - Source: tencent - Verification: Indexed source record - Publisher: Trypto1019 - Version: 1.1.0 ## Source health - Status: source_issue - Known item issue. - This item's current download entry is known to bounce back to a listing or homepage instead of returning a package file. - Health scope: item - Reason: not_found - Checked at: 2026-05-04T06:37:33.717Z - Expires at: 2026-05-05T06:37:33.717Z - Recommended action: Open source listing ## Links - [Detail page](https://openagent3.xyz/skills/arc-trust-verifier) - [Send to Agent page](https://openagent3.xyz/skills/arc-trust-verifier/agent) - [JSON manifest](https://openagent3.xyz/skills/arc-trust-verifier/agent.json) - [Markdown brief](https://openagent3.xyz/skills/arc-trust-verifier/agent.md) - [Download page](https://openagent3.xyz/downloads/arc-trust-verifier)