{"id":"4cf0c0d0-5887-4965-9042-029ff86021fc","entityType":"agent","slug":"clawhub-shaymizuno-agentverif","name":"✅ AgentVerif — Scan. Sign. Verify. Control your distribution.","canonicalUrl":"https://www.xpersona.co/agent/clawhub-shaymizuno-agentverif","canonicalPath":"/agent/clawhub-shaymizuno-agentverif","generatedAt":"2026-10-12T15:14:11.294Z","source":"CLAWHUB","claimStatus":"UNCLAIMED","verificationTier":"NONE","summary":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"medium","updatedAt":"2026-10-11T20:28:25.269Z","emptyReason":null},"description":"SCAN → SIGN → VERIFY. Certify your skill, detect tampering, revoke instantly. Full control over how your skill is distributed and run. Requires AGENTVERIF_AP...","descriptionLabel":"Source description","evidenceSummary":"Capability contract not published. No trust telemetry is available yet. 997 downloads reported by the source. Last updated 10/11/2026.","installCommand":"clawhub skill install s174z6r672gxnt8rsmsmknd03d8469nb:agentverif","sourceUrl":"https://clawhub.ai/shaymizuno/agentverif","homepage":"https://clawhub.ai/shaymizuno/skills/agentverif","primaryLinks":[{"label":"View on ClawHub","url":"https://clawhub.ai/shaymizuno/agentverif","kind":"source"},{"label":"Homepage","url":"https://clawhub.ai/shaymizuno/skills/agentverif","kind":"homepage"}],"safetyScore":84,"overallRank":62,"popularityScore":60,"trustScore":null,"claimedByName":null,"isOwner":false,"seoDescription":"✅ AgentVerif — Scan. Sign. Verify. Control your distribution. technical dossier on Xpersona with agent coverage, OPENCLEW support, and live trust metadata."},"coverage":{"evidence":{"source":"public-profile","verified":false,"confidence":"medium","updatedAt":"2026-10-11T20:28:25.269Z","emptyReason":null},"protocols":[{"protocol":"OPENCLEW","label":"OpenClaw","status":"self-declared","notes":"Declared in the public agent profile."}],"capabilities":[],"verifiedCount":0,"selfDeclaredCount":1,"capabilityMatrix":{"rows":[{"key":"OPENCLEW","type":"protocol","support":"unknown","confidenceSource":"profile","notes":"Listed on profile"}],"flattenedTokens":"protocol:OPENCLEW|unknown|profile"}},"adoption":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"medium","updatedAt":"2026-10-11T20:28:25.269Z","emptyReason":null},"stars":null,"forks":null,"downloads":997,"likes":null,"task":null,"library":null,"packageName":null,"latestVersion":"2.0.6","tractionLabel":"997 downloads"},"release":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"medium","updatedAt":"2026-10-11T20:28:25.191Z","emptyReason":null},"lastUpdatedAt":"2026-10-11T20:28:25.269Z","lastCrawledAt":"2026-10-11T20:28:25.191Z","lastIndexedAt":null,"nextCrawlAt":"2026-10-12T20:28:25.191Z","lastVerifiedAt":null,"highlights":[{"version":"2.0.6","createdAt":"2026-04-22T15:48:36.417Z","changelog":"Badge at top of skill page + upgraded billboard with certified score and license ID","fileCount":6,"zipByteSize":10415},{"version":"2.0.5","createdAt":"2026-04-22T15:41:59.429Z","changelog":"Added AgentVerif Certified badge — Score: 100/100 · AC-FA10-EB04","fileCount":5,"zipByteSize":9107},{"version":"2.0.3","createdAt":"2026-04-19T19:56:24.396Z","changelog":"Added ✅ Protected by AgentVerif billboard to all outputs","fileCount":5,"zipByteSize":9051},{"version":"2.0.2","createdAt":"2026-04-19T13:50:28.831Z","changelog":"Bug fixes from post-publish testing","fileCount":5,"zipByteSize":8974},{"version":"2.0.1","createdAt":"2026-04-19T12:49:00.044Z","changelog":"Stateless skill.py (no local file writes), Privacy & data section added, AGENTVERIF_API_KEY declared, emoji updated per ClawHub reviewer feedback","fileCount":5,"zipByteSize":8790},{"version":"2.0.0","createdAt":"2026-04-19T12:38:33.464Z","changelog":"Upgraded from AgentCop Sentinel — added cryptographic signing, tamper detection, and license revocation via agentverif.com","fileCount":5,"zipByteSize":9809},{"version":"1.0.2","createdAt":"2026-04-14T06:50:59.671Z","changelog":"agentcop 1.0.2 Broadened detection examples: now highlights agent-to-agent messages and external content. Simplified badge management: replaced subcommands with a single `/security badge` command and directs users to the website for badge generation.","fileCount":5,"zipByteSize":11628},{"version":"1.0.1","createdAt":"2026-04-04T10:44:57.189Z","changelog":"AgentCop 1.0.1 - Initial release with core security monitoring features. - Added documentation (README.md, SKILL.md) detailing usage and command instructions. - Introduced Python skill script (skill.py) implementing security checks and reporting. - Included package metadata (package.json) for deployment and integration.","fileCount":5,"zipByteSize":13156}]},"execution":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No published capability contract is available yet."},"installCommand":"clawhub skill install s174z6r672gxnt8rsmsmknd03d8469nb:agentverif","setupComplexity":"low","setupSteps":["Install using `clawhub skill install s174z6r672gxnt8rsmsmknd03d8469nb:agentverif` in an isolated environment before connecting it to live workloads.","No published capability contract is available yet, so validate auth and request/response behavior manually.","Review the upstream CLAWHUB listing at https://clawhub.ai/shaymizuno/agentverif before using production credentials."],"contract":{"contractStatus":"missing","authModes":[],"requires":[],"forbidden":[],"supportsMcp":false,"supportsA2a":false,"supportsStreaming":false,"inputSchemaRef":null,"outputSchemaRef":null,"dataRegion":null,"contractUpdatedAt":null,"sourceUpdatedAt":null,"freshnessSeconds":null},"invocationGuide":{"preferredApi":{"snapshotUrl":"https://www.xpersona.co/api/v1/agents/clawhub-shaymizuno-agentverif/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/clawhub-shaymizuno-agentverif/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/clawhub-shaymizuno-agentverif/trust"},"curlExamples":["curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-shaymizuno-agentverif/snapshot\"","curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-shaymizuno-agentverif/contract\"","curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-shaymizuno-agentverif/trust\""],"jsonRequestTemplate":{"query":"summarize this repo","constraints":{"maxLatencyMs":2000,"protocolPreference":["OPENCLEW"]}},"jsonResponseTemplate":{"ok":true,"result":{"summary":"...","confidence":0.9},"meta":{"source":"CLAWHUB","generatedAt":"2026-10-12T15:14:11.293Z"}},"retryPolicy":{"maxAttempts":3,"backoffMs":[500,1500,3500],"retryableConditions":["HTTP_429","HTTP_503","NETWORK_TIMEOUT"]}},"endpoints":{"dossierUrl":"https://www.xpersona.co/api/v1/agents/clawhub-shaymizuno-agentverif/dossier","snapshotUrl":"https://www.xpersona.co/api/v1/agents/clawhub-shaymizuno-agentverif/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/clawhub-shaymizuno-agentverif/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/clawhub-shaymizuno-agentverif/trust"}},"reliability":{"evidence":{"source":"runtime-metrics","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No trust, reliability, or runtime telemetry is available."},"trust":{"status":"unavailable","handshakeStatus":"UNKNOWN","verificationFreshnessHours":null,"reputationScore":null,"p95LatencyMs":null,"successRate30d":null,"fallbackRate":null,"attempts30d":null,"trustUpdatedAt":null,"trustConfidence":"unknown","sourceUpdatedAt":null,"freshnessSeconds":null},"decisionGuardrails":{"doNotUseIf":["Contract metadata is missing or unavailable for deterministic execution."],"safeUseWhen":[],"riskFlags":["missing_or_unavailable_contract","trust_data_unavailable","schema_references_missing"],"operationalConfidence":"low"},"executionMetrics":{"observedLatencyMsP50":null,"observedLatencyMsP95":null,"estimatedCostUsd":null,"uptime30d":null,"rateLimitRpm":null,"rateLimitBurst":null,"lastVerifiedAt":null,"verificationSource":null},"runtimeMetrics":{"successRate":null,"avgLatencyMs":null,"avgCostUsd":null,"hallucinationRate":null,"retryRate":null,"disputeRate":null,"p50Latency":null,"p95Latency":null,"lastUpdated":null}},"benchmarks":{"evidence":{"source":"no-benchmark-data","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No benchmark suites or observed failure patterns are available."},"suites":[],"failurePatterns":[]},"artifacts":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"medium","updatedAt":"2026-10-11T20:28:25.269Z","emptyReason":null},"readme":"Skill: ✅ AgentVerif — Scan. Sign. Verify. Control your distribution.\n\nOwner: shaymizuno\n\nSummary: SCAN → SIGN → VERIFY. Certify your skill, detect tampering, revoke instantly. Full control over how your skill is distributed and run. Requires AGENTVERIF_AP...\n\nTags: agentcop:1.0.0, agents:1.0.1, latest:2.0.6, malware:1.0.1, monitoring:1.0.0, owasp:1.0.0, promp injections:1.0.1, security:1.0.1, sentinel:1.0.0\n\nVersion history:\n\nv2.0.6 | 2026-04-22T15:48:36.417Z | user\n\nBadge at top of skill page + upgraded billboard with certified score and license ID\n\nv2.0.5 | 2026-04-22T15:41:59.429Z | user\n\nAdded AgentVerif Certified badge — Score: 100/100 · AC-FA10-EB04\n\nv2.0.3 | 2026-04-19T19:56:24.396Z | user\n\nAdded ✅ Protected by AgentVerif billboard to all outputs\n\nv2.0.2 | 2026-04-19T13:50:28.831Z | user\n\nBug fixes from post-publish testing\n\nv2.0.1 | 2026-04-19T12:49:00.044Z | user\n\nStateless skill.py (no local file writes), Privacy & data section added, AGENTVERIF_API_KEY declared, emoji updated per ClawHub reviewer feedback\n\nv2.0.0 | 2026-04-19T12:38:33.464Z | user\n\nUpgraded from AgentCop Sentinel — added cryptographic signing, tamper detection, and license revocation via agentverif.com\n\nv1.0.2 | 2026-04-14T06:50:59.671Z | user\n\nagentcop 1.0.2\nBroadened detection examples: now highlights agent-to-agent messages and external content.\nSimplified badge management: replaced subcommands with a single `/security badge` command and directs users to the website for badge generation.\n\nv1.0.1 | 2026-04-04T10:44:57.189Z | user\n\nAgentCop 1.0.1\n\n- Initial release with core security monitoring features.\n- Added documentation (README.md, SKILL.md) detailing usage and command instructions.\n- Introduced Python skill script (skill.py) implementing security checks and reporting.\n- Included package metadata (package.json) for deployment and integration.\n\nv1.0.0 | 2026-04-04T10:15:10.184Z | user\n\nAgentCop Security Skill – Initial Release\n\n- Monitors for OWASP LLM Top 10 security violations in real time via taint checks and policy breach alerts.\n- Provides /security status, /security report, and /security scan commands for detailed security assessments.\n- Reports agent fingerprints, trust scores, status, and violations clearly to users.\n- Automatic alerts require optional `agentcop-monitor` hook; commands work on demand regardless.\n- User-friendly error handling for missing installations and timeouts.\n\nArchive index:\n\nArchive v2.0.6: 6 files, 10415 bytes\n\nFiles: package.json (986b), README.md (2102b), skill-card.md (2420b), SKILL.md (4460b), skill.py (16778b), _meta.json (129b)\n\nFile v2.0.6:SKILL.md\n\n---\nname: agentverif\ndescription: \"SCAN → SIGN → VERIFY. Certify your skill, detect tampering, revoke instantly. Full control over how your skill is distributed and run. Requires AGENTVERIF_API_KEY for revoke.\"\nhomepage: https://agentverif.com\nuser-invocable: true\nmetadata: {\n \"openclaw\": {\n \"emoji\": \"✅\",\n \"badge\": \"✅ AgentVerif Certified\",\n \"requires\": { \"anyBins\": [\"python3\", \"python\"] }\n }\n}\n---\n\n# ✅ AgentVerif — OWASP Scan + Cryptographic Verification\n\n---\n✅ AgentVerif Certified\n⭐ Score: 100/100 · 🔑 AC-FA10-EB04\nclawhub.ai/agentverif\n---\n\n**AgentVerif** is the trust layer for OpenClaw skills.\nEvery skill you install or distribute is scanned against the\nOWASP LLM Top 10 and cryptographically verified —\nso you know it's authentic, unmodified, and safe to run.\n\nThe former **AgentCop Sentinel** is now **AgentVerif** —\nsame battle-tested OWASP scanner, now with cryptographic\nsigning, tamper detection, and license revocation built in.\n\nInstall in one line:\n```\nnpx clawhub@latest install agentverif\n```\n\n**Requires agentverif-sign (install once):**\n```\npip install agentverif-sign\n```\nThis skill never installs packages automatically.\nYou stay in control of your environment.\n\n---\n\n## What AgentVerif does\n\n| Layer | What it catches | OWASP |\n|-------|----------------|-------|\n| **SCAN** | Prompt injection, credential leaks, insecure output, tool-call injection | LLM01, LLM02, LLM06, LLM08 |\n| **SIGN** | Cryptographic hash + License ID — proves the skill is yours | — |\n| **VERIFY** | Tamper detection — catches modified versions before execution | — |\n| **REVOKE** | Kill a license instantly if the skill gets redistributed | — |\n\n---\n\n## Slash commands\n\n### /security scan [--last 1h|24h|7d] [--since ISO]\nScan current session for OWASP LLM Top 10 violations.\nScore 0–100. Below 70 = refused. Shows exact violations + fixes.\n\n### /security verify \nVerify a skill certificate against the agentverif.com registry.\nReturns: VERIFIED / TAMPERED / UNSIGNED / EXPIRED / REVOKED\n\n### /security sign \nSign a skill ZIP. OWASP scan runs first (score ≥ 70 required).\nInjects SIGNATURE.json. Issues a License ID.\n\n### /security revoke \nRevoke a license. Verification fails immediately for all buyers.\nRequires AGENTVERIF_API_KEY environment variable.\n\n### /security status\nReports that this skill is stateless — no local session data stored.\nRun `/security scan` to get a live score.\n\n### /security report\nFull violation report grouped by severity (CRITICAL → ERROR → WARN).\nReads from stdin — pipe session context or text to scan.\n\n### /security taint-check \nCheck a string for LLM01 prompt injection. Exit 1 if tainted.\n\n### /security output-check \nCheck agent output for LLM02 insecure patterns.\n\n### /security diff \nNot supported — this skill is stateless and stores no session history.\n\n### /security badge\nGet your ✅ AgentVerif Certified badge for your skill listing.\n\n---\n\n## Privacy & data\n\n**Network calls:** `scan`, `sign`, and `verify` transmit\ndata to `api.agentverif.com` via the `agentverif-sign`\nPython package:\n- `scan`: sends the skill ZIP for OWASP analysis\n- `sign`: sends the skill ZIP to generate a certificate\n- `verify`: sends the license ID to check registry status\n\nDo not scan or sign ZIPs containing secrets you cannot\nshare with agentverif.com.\n\n**Local persistence:** This skill itself writes no local files.\nThe `agentverif-sign` package may cache scan results —\nsee its source at github.com/trusthandoff/agentverif.\n\n**API key:** `revoke` requires AGENTVERIF_API_KEY.\nUse a scoped key. Never store in plaintext. Rotate if exposed.\n\n**Source code:** All behavior is auditable at\n[github.com/trusthandoff/agentverif](https://github.com/trusthandoff/agentverif)\n\n---\n\n## Exit codes\n\n| Code | Meaning |\n|------|---------|\n| 0 | Clean — no violations, certificate valid |\n| 1 | Violations detected or certificate invalid |\n| 2 | Error — agentverif-sign not installed or bad arguments |\n\n---\n\n## Requirements\n\n- OpenClaw ≥ 0.1\n- Python ≥ 3.11\n- `agentverif-sign >= 0.2.0`:\n `pip install agentverif-sign`\n\nThis skill never auto-installs packages.\n\n---\n\nBuilt by [agentverif.com](https://agentverif.com)\nSource: [github.com/trusthandoff/agentverif](https://github.com/trusthandoff/agentverif)\n\n---\n✅ AgentVerif Certified\n⭐ Score: 100/100 · 🔑 AC-FA10-EB04\nclawhub.ai/agentverif\n\nFile v2.0.6:README.md\n\n# 🛡️ AgentVerif — OpenClaw Skill\n\nOWASP LLM Top 10 scanner + cryptographic verification for every skill you install or distribute.\n\nInstall in one line:\n\n```bash\nnpx clawhub@latest install agentverif\n```\n\n**Requires agentverif-sign (install once):**\n\n```bash\npip install agentverif-sign\n```\n\nThis skill never installs packages automatically. You stay in control of your environment.\n\n---\n\n## Commands\n\n| Command | What it does |\n|---------|-------------|\n| `/security scan` | Scan current session for OWASP LLM Top 10 violations (score 0–100) |\n| `/security verify ` | Verify a skill certificate — VERIFIED / TAMPERED / UNSIGNED / REVOKED |\n| `/security sign ` | Sign a skill ZIP (OWASP scan runs first, score ≥ 70 required) |\n| `/security revoke ` | Revoke a license instantly (requires AGENTVERIF_API_KEY) |\n| `/security status` | Agent trust score, active violations, session fingerprint |\n| `/security report` | Full violation report grouped by severity |\n| `/security taint-check ` | Check a string for LLM01 prompt injection |\n| `/security output-check ` | Check agent output for LLM02 insecure patterns |\n| `/security diff ` | Compare two scan sessions for regressions |\n| `/security badge` | Get your ✅ AgentVerif Certified badge |\n\n---\n\n## OWASP Coverage\n\n| Layer | What it catches | OWASP |\n|-------|----------------|-------|\n| **SCAN** | Prompt injection, credential leaks, insecure output, tool-call injection | LLM01, LLM02, LLM06, LLM08 |\n| **SIGN** | Cryptographic hash + License ID | — |\n| **VERIFY** | Tamper detection before execution | — |\n| **REVOKE** | Kill a license instantly | — |\n\n---\n\n## Exit Codes\n\n| Code | Meaning |\n|------|---------|\n| 0 | Clean — no violations, certificate valid |\n| 1 | Violations detected or certificate invalid |\n| 2 | Error — agentverif-sign not installed or bad arguments |\n\n---\n\n## Requirements\n\n- OpenClaw ≥ 0.1\n- Python ≥ 3.11\n- `agentverif-sign >= 0.2.0`: `pip install agentverif-sign`\n\n---\n\nBuilt by [agentverif.com](https://agentverif.com)\n\nFile v2.0.6:_meta.json\n\n{\n \"ownerId\": \"kn74kv6cjp1hk19qg6w8cet8xs84776n\",\n \"slug\": \"agentverif\",\n \"version\": \"2.0.6\",\n \"publishedAt\": 1776872916417\n}\n\nFile v2.0.6:skill-card.md\n\n## Description:\n\nAgentVerif scans skill content for OWASP LLM risks, signs skill ZIPs, verifies skill certificates, and supports license revocation for controlled distribution.\n\nThis skill is ready for commercial/non-commercial use.\n\n## Publisher:\n\n[shaymizuno](https://clawhub.ai/user/shaymizuno)\n\n### License/Terms of Use:\n\nMIT-0\n\n## Use Case:\n\nDevelopers and skill publishers use AgentVerif to scan OpenClaw skills for common LLM security issues, sign distributable ZIP archives, verify certificates, and revoke licenses when distribution must be controlled.\n\n### Deployment Geography for Use:\n\nGlobal\n\n## Known Risks and Mitigations:\n\nRisk: Skill archives can be uploaded to the configured AgentVerif endpoint during scan or sign operations.\n\nMitigation: Review archive contents first and do not submit ZIPs containing secrets, credentials, or proprietary material unless sharing them with that endpoint is acceptable.\n\nRisk: The sign command can modify ZIP files in place.\n\nMitigation: Keep a backup copy of the original archive before signing.\n\nRisk: Fixed certification text may overstate assurance if users treat it as a fresh scan result.\n\nMitigation: Verify the release and review current scan output before relying on certification claims.\n\nRisk: Unpinned installer or dependency versions can change behavior after installation.\n\nMitigation: Use pinned versions for the ClawHub installer and the agentverif-sign dependency in controlled environments.\n\n## Reference(s):\n\n- [ClawHub skill listing](https://clawhub.ai/shaymizuno/skills/agentverif)\n- [Publisher profile](https://clawhub.ai/user/shaymizuno)\n- [AgentVerif homepage](https://agentverif.com)\n- [AgentVerif documentation](https://agentverif.com/docs)\n\n## Skill Output:\n\n**Output Type(s):** [text, markdown, JSON, shell commands, configuration, guidance]\n\n**Output Format:** [JSON and text responses with optional Markdown badge output and shell command guidance]\n\n**Output Parameters:** [1D]\n\n**Other Properties Related to Output:** [Commands return process exit codes for pass, fail, and argument or dependency errors.]\n\n## Skill Version(s):\n\n2.0.6 (source: server release evidence)\n\n## Ethical Considerations:\n\nUsers should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.\n\nFile v2.0.6:package.json\n\n{\n \"name\": \"openclaw-skill-agentverif\",\n \"version\": \"2.0.1\",\n \"description\": \"✅ SCAN → SIGN → VERIFY. Certify your skill, detect tampering, revoke instantly. Full control over how your skill is distributed and run.\",\n \"homepage\": \"https://agentverif.com\",\n \"license\": \"MIT\",\n \"openclaw\": {\n \"type\": \"skill\",\n \"slug\": \"agentverif\",\n \"entry\": \"skill.py\",\n \"python-package\": \"agentverif-sign>=0.2.0\",\n \"requires\": {\n \"anyBins\": [\"python3\", \"python\"]\n },\n \"emoji\": \"✅\",\n \"badge\": \"✅ AgentVerif Certified\",\n \"env\": {\n \"AGENTVERIF_API_KEY\": {\n \"required\": false,\n \"description\": \"Required only for the revoke command.\"\n }\n },\n \"commands\": [\n \"scan\",\n \"verify\",\n \"sign\",\n \"revoke\",\n \"status\",\n \"report\",\n \"taint-check\",\n \"output-check\",\n \"diff\",\n \"badge\"\n ]\n },\n \"repository\": {\n \"type\": \"git\",\n \"url\": \"https://github.com/trusthandoff/agentverif\"\n }\n}\n\nArchive v2.0.5: 5 files, 9107 bytes\n\nFiles: package.json (986b), README.md (2102b), SKILL.md (4364b), skill.py (16739b), _meta.json (129b)\n\nFile v2.0.5:SKILL.md\n\n---\nname: agentverif\ndescription: \"SCAN → SIGN → VERIFY. Certify your skill, detect tampering, revoke instantly. Full control over how your skill is distributed and run. Requires AGENTVERIF_API_KEY for revoke.\"\nhomepage: https://agentverif.com\nuser-invocable: true\nmetadata: {\n \"openclaw\": {\n \"emoji\": \"✅\",\n \"badge\": \"✅ AgentVerif Certified\",\n \"requires\": { \"anyBins\": [\"python3\", \"python\"] }\n }\n}\n---\n\n# ✅ AgentVerif — OWASP Scan + Cryptographic Verification\n\n**AgentVerif** is the trust layer for OpenClaw skills.\nEvery skill you install or distribute is scanned against the\nOWASP LLM Top 10 and cryptographically verified —\nso you know it's authentic, unmodified, and safe to run.\n\nThe former **AgentCop Sentinel** is now **AgentVerif** —\nsame battle-tested OWASP scanner, now with cryptographic\nsigning, tamper detection, and license revocation built in.\n\nInstall in one line:\n```\nnpx clawhub@latest install agentverif\n```\n\n**Requires agentverif-sign (install once):**\n```\npip install agentverif-sign\n```\nThis skill never installs packages automatically.\nYou stay in control of your environment.\n\n---\n\n## What AgentVerif does\n\n| Layer | What it catches | OWASP |\n|-------|----------------|-------|\n| **SCAN** | Prompt injection, credential leaks, insecure output, tool-call injection | LLM01, LLM02, LLM06, LLM08 |\n| **SIGN** | Cryptographic hash + License ID — proves the skill is yours | — |\n| **VERIFY** | Tamper detection — catches modified versions before execution | — |\n| **REVOKE** | Kill a license instantly if the skill gets redistributed | — |\n\n---\n\n## Slash commands\n\n### /security scan [--last 1h|24h|7d] [--since ISO]\nScan current session for OWASP LLM Top 10 violations.\nScore 0–100. Below 70 = refused. Shows exact violations + fixes.\n\n### /security verify \nVerify a skill certificate against the agentverif.com registry.\nReturns: VERIFIED / TAMPERED / UNSIGNED / EXPIRED / REVOKED\n\n### /security sign \nSign a skill ZIP. OWASP scan runs first (score ≥ 70 required).\nInjects SIGNATURE.json. Issues a License ID.\n\n### /security revoke \nRevoke a license. Verification fails immediately for all buyers.\nRequires AGENTVERIF_API_KEY environment variable.\n\n### /security status\nReports that this skill is stateless — no local session data stored.\nRun `/security scan` to get a live score.\n\n### /security report\nFull violation report grouped by severity (CRITICAL → ERROR → WARN).\nReads from stdin — pipe session context or text to scan.\n\n### /security taint-check \nCheck a string for LLM01 prompt injection. Exit 1 if tainted.\n\n### /security output-check \nCheck agent output for LLM02 insecure patterns.\n\n### /security diff \nNot supported — this skill is stateless and stores no session history.\n\n### /security badge\nGet your ✅ AgentVerif Certified badge for your skill listing.\n\n---\n\n## Privacy & data\n\n**Network calls:** `scan`, `sign`, and `verify` transmit\ndata to `api.agentverif.com` via the `agentverif-sign`\nPython package:\n- `scan`: sends the skill ZIP for OWASP analysis\n- `sign`: sends the skill ZIP to generate a certificate\n- `verify`: sends the license ID to check registry status\n\nDo not scan or sign ZIPs containing secrets you cannot\nshare with agentverif.com.\n\n**Local persistence:** This skill itself writes no local files.\nThe `agentverif-sign` package may cache scan results —\nsee its source at github.com/trusthandoff/agentverif.\n\n**API key:** `revoke` requires AGENTVERIF_API_KEY.\nUse a scoped key. Never store in plaintext. Rotate if exposed.\n\n**Source code:** All behavior is auditable at\n[github.com/trusthandoff/agentverif](https://github.com/trusthandoff/agentverif)\n\n---\n\n## Exit codes\n\n| Code | Meaning |\n|------|---------|\n| 0 | Clean — no violations, certificate valid |\n| 1 | Violations detected or certificate invalid |\n| 2 | Error — agentverif-sign not installed or bad arguments |\n\n---\n\n## Requirements\n\n- OpenClaw ≥ 0.1\n- Python ≥ 3.11\n- `agentverif-sign >= 0.2.0`:\n `pip install agentverif-sign`\n\nThis skill never auto-installs packages.\n\n---\n\nBuilt by [agentverif.com](https://agentverif.com)\nSource: [github.com/trusthandoff/agentverif](https://github.com/trusthandoff/agentverif)\n\n---\n✅ AgentVerif Certified\n⭐ Score: 100/100 · 🔑 AC-FA10-EB04\nclawhub.ai/agentverif\n\nFile v2.0.5:README.md\n\n# 🛡️ AgentVerif — OpenClaw Skill\n\nOWASP LLM Top 10 scanner + cryptographic verification for every skill you install or distribute.\n\nInstall in one line:\n\n```bash\nnpx clawhub@latest install agentverif\n```\n\n**Requires agentverif-sign (install once):**\n\n```bash\npip install agentverif-sign\n```\n\nThis skill never installs packages automatically. You stay in control of your environment.\n\n---\n\n## Commands\n\n| Command | What it does |\n|---------|-------------|\n| `/security scan` | Scan current session for OWASP LLM Top 10 violations (score 0–100) |\n| `/security verify ` | Verify a skill certificate — VERIFIED / TAMPERED / UNSIGNED / REVOKED |\n| `/security sign ` | Sign a skill ZIP (OWASP scan runs first, score ≥ 70 required) |\n| `/security revoke ` | Revoke a license instantly (requires AGENTVERIF_API_KEY) |\n| `/security status` | Agent trust score, active violations, session fingerprint |\n| `/security report` | Full violation report grouped by severity |\n| `/security taint-check ` | Check a string for LLM01 prompt injection |\n| `/security output-check ` | Check agent output for LLM02 insecure patterns |\n| `/security diff ` | Compare two scan sessions for regressions |\n| `/security badge` | Get your ✅ AgentVerif Certified badge |\n\n---\n\n## OWASP Coverage\n\n| Layer | What it catches | OWASP |\n|-------|----------------|-------|\n| **SCAN** | Prompt injection, credential leaks, insecure output, tool-call injection | LLM01, LLM02, LLM06, LLM08 |\n| **SIGN** | Cryptographic hash + License ID | — |\n| **VERIFY** | Tamper detection before execution | — |\n| **REVOKE** | Kill a license instantly | — |\n\n---\n\n## Exit Codes\n\n| Code | Meaning |\n|------|---------|\n| 0 | Clean — no violations, certificate valid |\n| 1 | Violations detected or certificate invalid |\n| 2 | Error — agentverif-sign not installed or bad arguments |\n\n---\n\n## Requirements\n\n- OpenClaw ≥ 0.1\n- Python ≥ 3.11\n- `agentverif-sign >= 0.2.0`: `pip install agentverif-sign`\n\n---\n\nBuilt by [agentverif.com](https://agentverif.com)\n\nFile v2.0.5:_meta.json\n\n{\n \"ownerId\": \"kn74kv6cjp1hk19qg6w8cet8xs84776n\",\n \"slug\": \"agentverif\",\n \"version\": \"2.0.5\",\n \"publishedAt\": 1776872519429\n}\n\nFile v2.0.5:package.json\n\n{\n \"name\": \"openclaw-skill-agentverif\",\n \"version\": \"2.0.1\",\n \"description\": \"✅ SCAN → SIGN → VERIFY. Certify your skill, detect tampering, revoke instantly. Full control over how your skill is distributed and run.\",\n \"homepage\": \"https://agentverif.com\",\n \"license\": \"MIT\",\n \"openclaw\": {\n \"type\": \"skill\",\n \"slug\": \"agentverif\",\n \"entry\": \"skill.py\",\n \"python-package\": \"agentverif-sign>=0.2.0\",\n \"requires\": {\n \"anyBins\": [\"python3\", \"python\"]\n },\n \"emoji\": \"✅\",\n \"badge\": \"✅ AgentVerif Certified\",\n \"env\": {\n \"AGENTVERIF_API_KEY\": {\n \"required\": false,\n \"description\": \"Required only for the revoke command.\"\n }\n },\n \"commands\": [\n \"scan\",\n \"verify\",\n \"sign\",\n \"revoke\",\n \"status\",\n \"report\",\n \"taint-check\",\n \"output-check\",\n \"diff\",\n \"badge\"\n ]\n },\n \"repository\": {\n \"type\": \"git\",\n \"url\": \"https://github.com/trusthandoff/agentverif\"\n }\n}\n\nArchive v2.0.3: 5 files, 9051 bytes\n\nFiles: package.json (986b), README.md (2102b), SKILL.md (4272b), skill.py (16739b), _meta.json (129b)\n\nFile v2.0.3:SKILL.md\n\n---\nname: agentverif\ndescription: \"SCAN → SIGN → VERIFY. Certify your skill, detect tampering, revoke instantly. Full control over how your skill is distributed and run. Requires AGENTVERIF_API_KEY for revoke.\"\nhomepage: https://agentverif.com\nuser-invocable: true\nmetadata: {\n \"openclaw\": {\n \"emoji\": \"✅\",\n \"badge\": \"✅ AgentVerif Certified\",\n \"requires\": { \"anyBins\": [\"python3\", \"python\"] }\n }\n}\n---\n\n# ✅ AgentVerif — OWASP Scan + Cryptographic Verification\n\n**AgentVerif** is the trust layer for OpenClaw skills.\nEvery skill you install or distribute is scanned against the\nOWASP LLM Top 10 and cryptographically verified —\nso you know it's authentic, unmodified, and safe to run.\n\nThe former **AgentCop Sentinel** is now **AgentVerif** —\nsame battle-tested OWASP scanner, now with cryptographic\nsigning, tamper detection, and license revocation built in.\n\nInstall in one line:\n```\nnpx clawhub@latest install agentverif\n```\n\n**Requires agentverif-sign (install once):**\n```\npip install agentverif-sign\n```\nThis skill never installs packages automatically.\nYou stay in control of your environment.\n\n---\n\n## What AgentVerif does\n\n| Layer | What it catches | OWASP |\n|-------|----------------|-------|\n| **SCAN** | Prompt injection, credential leaks, insecure output, tool-call injection | LLM01, LLM02, LLM06, LLM08 |\n| **SIGN** | Cryptographic hash + License ID — proves the skill is yours | — |\n| **VERIFY** | Tamper detection — catches modified versions before execution | — |\n| **REVOKE** | Kill a license instantly if the skill gets redistributed | — |\n\n---\n\n## Slash commands\n\n### /security scan [--last 1h|24h|7d] [--since ISO]\nScan current session for OWASP LLM Top 10 violations.\nScore 0–100. Below 70 = refused. Shows exact violations + fixes.\n\n### /security verify \nVerify a skill certificate against the agentverif.com registry.\nReturns: VERIFIED / TAMPERED / UNSIGNED / EXPIRED / REVOKED\n\n### /security sign \nSign a skill ZIP. OWASP scan runs first (score ≥ 70 required).\nInjects SIGNATURE.json. Issues a License ID.\n\n### /security revoke \nRevoke a license. Verification fails immediately for all buyers.\nRequires AGENTVERIF_API_KEY environment variable.\n\n### /security status\nReports that this skill is stateless — no local session data stored.\nRun `/security scan` to get a live score.\n\n### /security report\nFull violation report grouped by severity (CRITICAL → ERROR → WARN).\nReads from stdin — pipe session context or text to scan.\n\n### /security taint-check \nCheck a string for LLM01 prompt injection. Exit 1 if tainted.\n\n### /security output-check \nCheck agent output for LLM02 insecure patterns.\n\n### /security diff \nNot supported — this skill is stateless and stores no session history.\n\n### /security badge\nGet your ✅ AgentVerif Certified badge for your skill listing.\n\n---\n\n## Privacy & data\n\n**Network calls:** `scan`, `sign`, and `verify` transmit\ndata to `api.agentverif.com` via the `agentverif-sign`\nPython package:\n- `scan`: sends the skill ZIP for OWASP analysis\n- `sign`: sends the skill ZIP to generate a certificate\n- `verify`: sends the license ID to check registry status\n\nDo not scan or sign ZIPs containing secrets you cannot\nshare with agentverif.com.\n\n**Local persistence:** This skill itself writes no local files.\nThe `agentverif-sign` package may cache scan results —\nsee its source at github.com/trusthandoff/agentverif.\n\n**API key:** `revoke` requires AGENTVERIF_API_KEY.\nUse a scoped key. Never store in plaintext. Rotate if exposed.\n\n**Source code:** All behavior is auditable at\n[github.com/trusthandoff/agentverif](https://github.com/trusthandoff/agentverif)\n\n---\n\n## Exit codes\n\n| Code | Meaning |\n|------|---------|\n| 0 | Clean — no violations, certificate valid |\n| 1 | Violations detected or certificate invalid |\n| 2 | Error — agentverif-sign not installed or bad arguments |\n\n---\n\n## Requirements\n\n- OpenClaw ≥ 0.1\n- Python ≥ 3.11\n- `agentverif-sign >= 0.2.0`:\n `pip install agentverif-sign`\n\nThis skill never auto-installs packages.\n\n---\n\nBuilt by [agentverif.com](https://agentverif.com)\nSource: [github.com/trusthandoff/agentverif](https://github.com/trusthandoff/agentverif)\n\nFile v2.0.3:README.md\n\n# 🛡️ AgentVerif — OpenClaw Skill\n\nOWASP LLM Top 10 scanner + cryptographic verification for every skill you install or distribute.\n\nInstall in one line:\n\n```bash\nnpx clawhub@latest install agentverif\n```\n\n**Requires agentverif-sign (install once):**\n\n```bash\npip install agentverif-sign\n```\n\nThis skill never installs packages automatically. You stay in control of your environment.\n\n---\n\n## Commands\n\n| Command | What it does |\n|---------|-------------|\n| `/security scan` | Scan current session for OWASP LLM Top 10 violations (score 0–100) |\n| `/security verify ` | Verify a skill certificate — VERIFIED / TAMPERED / UNSIGNED / REVOKED |\n| `/security sign ` | Sign a skill ZIP (OWASP scan runs first, score ≥ 70 required) |\n| `/security revoke ` | Revoke a license instantly (requires AGENTVERIF_API_KEY) |\n| `/security status` | Agent trust score, active violations, session fingerprint |\n| `/security report` | Full violation report grouped by severity |\n| `/security taint-check ` | Check a string for LLM01 prompt injection |\n| `/security output-check ` | Check agent output for LLM02 insecure patterns |\n| `/security diff ` | Compare two scan sessions for regressions |\n| `/security badge` | Get your ✅ AgentVerif Certified badge |\n\n---\n\n## OWASP Coverage\n\n| Layer | What it catches | OWASP |\n|-------|----------------|-------|\n| **SCAN** | Prompt injection, credential leaks, insecure output, tool-call injection | LLM01, LLM02, LLM06, LLM08 |\n| **SIGN** | Cryptographic hash + License ID | — |\n| **VERIFY** | Tamper detection before execution | — |\n| **REVOKE** | Kill a license instantly | — |\n\n---\n\n## Exit Codes\n\n| Code | Meaning |\n|------|---------|\n| 0 | Clean — no violations, certificate valid |\n| 1 | Violations detected or certificate invalid |\n| 2 | Error — agentverif-sign not installed or bad arguments |\n\n---\n\n## Requirements\n\n- OpenClaw ≥ 0.1\n- Python ≥ 3.11\n- `agentverif-sign >= 0.2.0`: `pip install agentverif-sign`\n\n---\n\nBuilt by [agentverif.com](https://agentverif.com)\n\nFile v2.0.3:_meta.json\n\n{\n \"ownerId\": \"kn74kv6cjp1hk19qg6w8cet8xs84776n\",\n \"slug\": \"agentverif\",\n \"version\": \"2.0.3\",\n \"publishedAt\": 1776628584396\n}\n\nFile v2.0.3:package.json\n\n{\n \"name\": \"openclaw-skill-agentverif\",\n \"version\": \"2.0.1\",\n \"description\": \"✅ SCAN → SIGN → VERIFY. Certify your skill, detect tampering, revoke instantly. Full control over how your skill is distributed and run.\",\n \"homepage\": \"https://agentverif.com\",\n \"license\": \"MIT\",\n \"openclaw\": {\n \"type\": \"skill\",\n \"slug\": \"agentverif\",\n \"entry\": \"skill.py\",\n \"python-package\": \"agentverif-sign>=0.2.0\",\n \"requires\": {\n \"anyBins\": [\"python3\", \"python\"]\n },\n \"emoji\": \"✅\",\n \"badge\": \"✅ AgentVerif Certified\",\n \"env\": {\n \"AGENTVERIF_API_KEY\": {\n \"required\": false,\n \"description\": \"Required only for the revoke command.\"\n }\n },\n \"commands\": [\n \"scan\",\n \"verify\",\n \"sign\",\n \"revoke\",\n \"status\",\n \"report\",\n \"taint-check\",\n \"output-check\",\n \"diff\",\n \"badge\"\n ]\n },\n \"repository\": {\n \"type\": \"git\",\n \"url\": \"https://github.com/trusthandoff/agentverif\"\n }\n}\n\nArchive v2.0.2: 5 files, 8974 bytes\n\nFiles: package.json (986b), README.md (2102b), SKILL.md (4272b), skill.py (16245b), _meta.json (129b)\n\nFile v2.0.2:SKILL.md\n\n---\nname: agentverif\ndescription: \"SCAN → SIGN → VERIFY. Certify your skill, detect tampering, revoke instantly. Full control over how your skill is distributed and run. Requires AGENTVERIF_API_KEY for revoke.\"\nhomepage: https://agentverif.com\nuser-invocable: true\nmetadata: {\n \"openclaw\": {\n \"emoji\": \"✅\",\n \"badge\": \"✅ AgentVerif Certified\",\n \"requires\": { \"anyBins\": [\"python3\", \"python\"] }\n }\n}\n---\n\n# ✅ AgentVerif — OWASP Scan + Cryptographic Verification\n\n**AgentVerif** is the trust layer for OpenClaw skills.\nEvery skill you install or distribute is scanned against the\nOWASP LLM Top 10 and cryptographically verified —\nso you know it's authentic, unmodified, and safe to run.\n\nThe former **AgentCop Sentinel** is now **AgentVerif** —\nsame battle-tested OWASP scanner, now with cryptographic\nsigning, tamper detection, and license revocation built in.\n\nInstall in one line:\n```\nnpx clawhub@latest install agentverif\n```\n\n**Requires agentverif-sign (install once):**\n```\npip install agentverif-sign\n```\nThis skill never installs packages automatically.\nYou stay in control of your environment.\n\n---\n\n## What AgentVerif does\n\n| Layer | What it catches | OWASP |\n|-------|----------------|-------|\n| **SCAN** | Prompt injection, credential leaks, insecure output, tool-call injection | LLM01, LLM02, LLM06, LLM08 |\n| **SIGN** | Cryptographic hash + License ID — proves the skill is yours | — |\n| **VERIFY** | Tamper detection — catches modified versions before execution | — |\n| **REVOKE** | Kill a license instantly if the skill gets redistributed | — |\n\n---\n\n## Slash commands\n\n### /security scan [--last 1h|24h|7d] [--since ISO]\nScan current session for OWASP LLM Top 10 violations.\nScore 0–100. Below 70 = refused. Shows exact violations + fixes.\n\n### /security verify \nVerify a skill certificate against the agentverif.com registry.\nReturns: VERIFIED / TAMPERED / UNSIGNED / EXPIRED / REVOKED\n\n### /security sign \nSign a skill ZIP. OWASP scan runs first (score ≥ 70 required).\nInjects SIGNATURE.json. Issues a License ID.\n\n### /security revoke \nRevoke a license. Verification fails immediately for all buyers.\nRequires AGENTVERIF_API_KEY environment variable.\n\n### /security status\nReports that this skill is stateless — no local session data stored.\nRun `/security scan` to get a live score.\n\n### /security report\nFull violation report grouped by severity (CRITICAL → ERROR → WARN).\nReads from stdin — pipe session context or text to scan.\n\n### /security taint-check \nCheck a string for LLM01 prompt injection. Exit 1 if tainted.\n\n### /security output-check \nCheck agent output for LLM02 insecure patterns.\n\n### /security diff \nNot supported — this skill is stateless and stores no session history.\n\n### /security badge\nGet your ✅ AgentVerif Certified badge for your skill listing.\n\n---\n\n## Privacy & data\n\n**Network calls:** `scan`, `sign`, and `verify` transmit\ndata to `api.agentverif.com` via the `agentverif-sign`\nPython package:\n- `scan`: sends the skill ZIP for OWASP analysis\n- `sign`: sends the skill ZIP to generate a certificate\n- `verify`: sends the license ID to check registry status\n\nDo not scan or sign ZIPs containing secrets you cannot\nshare with agentverif.com.\n\n**Local persistence:** This skill itself writes no local files.\nThe `agentverif-sign` package may cache scan results —\nsee its source at github.com/trusthandoff/agentverif.\n\n**API key:** `revoke` requires AGENTVERIF_API_KEY.\nUse a scoped key. Never store in plaintext. Rotate if exposed.\n\n**Source code:** All behavior is auditable at\n[github.com/trusthandoff/agentverif](https://github.com/trusthandoff/agentverif)\n\n---\n\n## Exit codes\n\n| Code | Meaning |\n|------|---------|\n| 0 | Clean — no violations, certificate valid |\n| 1 | Violations detected or certificate invalid |\n| 2 | Error — agentverif-sign not installed or bad arguments |\n\n---\n\n## Requirements\n\n- OpenClaw ≥ 0.1\n- Python ≥ 3.11\n- `agentverif-sign >= 0.2.0`:\n `pip install agentverif-sign`\n\nThis skill never auto-installs packages.\n\n---\n\nBuilt by [agentverif.com](https://agentverif.com)\nSource: [github.com/trusthandoff/agentverif](https://github.com/trusthandoff/agentverif)\n\nFile v2.0.2:README.md\n\n# 🛡️ AgentVerif — OpenClaw Skill\n\nOWASP LLM Top 10 scanner + cryptographic verification for every skill you install or distribute.\n\nInstall in one line:\n\n```bash\nnpx clawhub@latest install agentverif\n```\n\n**Requires agentverif-sign (install once):**\n\n```bash\npip install agentverif-sign\n```\n\nThis skill never installs packages automatically. You stay in control of your environment.\n\n---\n\n## Commands\n\n| Command | What it does |\n|---------|-------------|\n| `/security scan` | Scan current session for OWASP LLM Top 10 violations (score 0–100) |\n| `/security verify ` | Verify a skill certificate — VERIFIED / TAMPERED / UNSIGNED / REVOKED |\n| `/security sign ` | Sign a skill ZIP (OWASP scan runs first, score ≥ 70 required) |\n| `/security revoke ` | Revoke a license instantly (requires AGENTVERIF_API_KEY) |\n| `/security status` | Agent trust score, active violations, session fingerprint |\n| `/security report` | Full violation report grouped by severity |\n| `/security taint-check ` | Check a string for LLM01 prompt injection |\n| `/security output-check ` | Check agent output for LLM02 insecure patterns |\n| `/security diff ` | Compare two scan sessions for regressions |\n| `/security badge` | Get your ✅ AgentVerif Certified badge |\n\n---\n\n## OWASP Coverage\n\n| Layer | What it catches | OWASP |\n|-------|----------------|-------|\n| **SCAN** | Prompt injection, credential leaks, insecure output, tool-call injection | LLM01, LLM02, LLM06, LLM08 |\n| **SIGN** | Cryptographic hash + License ID | — |\n| **VERIFY** | Tamper detection before execution | — |\n| **REVOKE** | Kill a license instantly | — |\n\n---\n\n## Exit Codes\n\n| Code | Meaning |\n|------|---------|\n| 0 | Clean — no violations, certificate valid |\n| 1 | Violations detected or certificate invalid |\n| 2 | Error — agentverif-sign not installed or bad arguments |\n\n---\n\n## Requirements\n\n- OpenClaw ≥ 0.1\n- Python ≥ 3.11\n- `agentverif-sign >= 0.2.0`: `pip install agentverif-sign`\n\n---\n\nBuilt by [agentverif.com](https://agentverif.com)\n\nFile v2.0.2:_meta.json\n\n{\n \"ownerId\": \"kn74kv6cjp1hk19qg6w8cet8xs84776n\",\n \"slug\": \"agentverif\",\n \"version\": \"2.0.2\",\n \"publishedAt\": 1776606628831\n}\n\nFile v2.0.2:package.json\n\n{\n \"name\": \"openclaw-skill-agentverif\",\n \"version\": \"2.0.1\",\n \"description\": \"✅ SCAN → SIGN → VERIFY. Certify your skill, detect tampering, revoke instantly. Full control over how your skill is distributed and run.\",\n \"homepage\": \"https://agentverif.com\",\n \"license\": \"MIT\",\n \"openclaw\": {\n \"type\": \"skill\",\n \"slug\": \"agentverif\",\n \"entry\": \"skill.py\",\n \"python-package\": \"agentverif-sign>=0.2.0\",\n \"requires\": {\n \"anyBins\": [\"python3\", \"python\"]\n },\n \"emoji\": \"✅\",\n \"badge\": \"✅ AgentVerif Certified\",\n \"env\": {\n \"AGENTVERIF_API_KEY\": {\n \"required\": false,\n \"description\": \"Required only for the revoke command.\"\n }\n },\n \"commands\": [\n \"scan\",\n \"verify\",\n \"sign\",\n \"revoke\",\n \"status\",\n \"report\",\n \"taint-check\",\n \"output-check\",\n \"diff\",\n \"badge\"\n ]\n },\n \"repository\": {\n \"type\": \"git\",\n \"url\": \"https://github.com/trusthandoff/agentverif\"\n }\n}\n\nArchive v2.0.1: 5 files, 8790 bytes\n\nFiles: package.json (986b), README.md (2102b), SKILL.md (4272b), skill.py (15516b), _meta.json (129b)\n\nFile v2.0.1:SKILL.md\n\n---\nname: agentverif\ndescription: \"SCAN → SIGN → VERIFY. Certify your skill, detect tampering, revoke instantly. Full control over how your skill is distributed and run. Requires AGENTVERIF_API_KEY for revoke.\"\nhomepage: https://agentverif.com\nuser-invocable: true\nmetadata: {\n \"openclaw\": {\n \"emoji\": \"✅\",\n \"badge\": \"✅ AgentVerif Certified\",\n \"requires\": { \"anyBins\": [\"python3\", \"python\"] }\n }\n}\n---\n\n# ✅ AgentVerif — OWASP Scan + Cryptographic Verification\n\n**AgentVerif** is the trust layer for OpenClaw skills.\nEvery skill you install or distribute is scanned against the\nOWASP LLM Top 10 and cryptographically verified —\nso you know it's authentic, unmodified, and safe to run.\n\nThe former **AgentCop Sentinel** is now **AgentVerif** —\nsame battle-tested OWASP scanner, now with cryptographic\nsigning, tamper detection, and license revocation built in.\n\nInstall in one line:\n```\nnpx clawhub@latest install agentverif\n```\n\n**Requires agentverif-sign (install once):**\n```\npip install agentverif-sign\n```\nThis skill never installs packages automatically.\nYou stay in control of your environment.\n\n---\n\n## What AgentVerif does\n\n| Layer | What it catches | OWASP |\n|-------|----------------|-------|\n| **SCAN** | Prompt injection, credential leaks, insecure output, tool-call injection | LLM01, LLM02, LLM06, LLM08 |\n| **SIGN** | Cryptographic hash + License ID — proves the skill is yours | — |\n| **VERIFY** | Tamper detection — catches modified versions before execution | — |\n| **REVOKE** | Kill a license instantly if the skill gets redistributed | — |\n\n---\n\n## Slash commands\n\n### /security scan [--last 1h|24h|7d] [--since ISO]\nScan current session for OWASP LLM Top 10 violations.\nScore 0–100. Below 70 = refused. Shows exact violations + fixes.\n\n### /security verify \nVerify a skill certificate against the agentverif.com registry.\nReturns: VERIFIED / TAMPERED / UNSIGNED / EXPIRED / REVOKED\n\n### /security sign \nSign a skill ZIP. OWASP scan runs first (score ≥ 70 required).\nInjects SIGNATURE.json. Issues a License ID.\n\n### /security revoke \nRevoke a license. Verification fails immediately for all buyers.\nRequires AGENTVERIF_API_KEY environment variable.\n\n### /security status\nReports that this skill is stateless — no local session data stored.\nRun `/security scan` to get a live score.\n\n### /security report\nFull violation report grouped by severity (CRITICAL → ERROR → WARN).\nReads from stdin — pipe session context or text to scan.\n\n### /security taint-check \nCheck a string for LLM01 prompt injection. Exit 1 if tainted.\n\n### /security output-check \nCheck agent output for LLM02 insecure patterns.\n\n### /security diff \nNot supported — this skill is stateless and stores no session history.\n\n### /security badge\nGet your ✅ AgentVerif Certified badge for your skill listing.\n\n---\n\n## Privacy & data\n\n**Network calls:** `scan`, `sign`, and `verify` transmit\ndata to `api.agentverif.com` via the `agentverif-sign`\nPython package:\n- `scan`: sends the skill ZIP for OWASP analysis\n- `sign`: sends the skill ZIP to generate a certificate\n- `verify`: sends the license ID to check registry status\n\nDo not scan or sign ZIPs containing secrets you cannot\nshare with agentverif.com.\n\n**Local persistence:** This skill itself writes no local files.\nThe `agentverif-sign` package may cache scan results —\nsee its source at github.com/trusthandoff/agentverif.\n\n**API key:** `revoke` requires AGENTVERIF_API_KEY.\nUse a scoped key. Never store in plaintext. Rotate if exposed.\n\n**Source code:** All behavior is auditable at\n[github.com/trusthandoff/agentverif](https://github.com/trusthandoff/agentverif)\n\n---\n\n## Exit codes\n\n| Code | Meaning |\n|------|---------|\n| 0 | Clean — no violations, certificate valid |\n| 1 | Violations detected or certificate invalid |\n| 2 | Error — agentverif-sign not installed or bad arguments |\n\n---\n\n## Requirements\n\n- OpenClaw ≥ 0.1\n- Python ≥ 3.11\n- `agentverif-sign >= 0.2.0`:\n `pip install agentverif-sign`\n\nThis skill never auto-installs packages.\n\n---\n\nBuilt by [agentverif.com](https://agentverif.com)\nSource: [github.com/trusthandoff/agentverif](https://github.com/trusthandoff/agentverif)\n\nFile v2.0.1:README.md\n\n# 🛡️ AgentVerif — OpenClaw Skill\n\nOWASP LLM Top 10 scanner + cryptographic verification for every skill you install or distribute.\n\nInstall in one line:\n\n```bash\nnpx clawhub@latest install agentverif\n```\n\n**Requires agentverif-sign (install once):**\n\n```bash\npip install agentverif-sign\n```\n\nThis skill never installs packages automatically. You stay in control of your environment.\n\n---\n\n## Commands\n\n| Command | What it does |\n|---------|-------------|\n| `/security scan` | Scan current session for OWASP LLM Top 10 violations (score 0–100) |\n| `/security verify ` | Verify a skill certificate — VERIFIED / TAMPERED / UNSIGNED / REVOKED |\n| `/security sign ` | Sign a skill ZIP (OWASP scan runs first, score ≥ 70 required) |\n| `/security revoke ` | Revoke a license instantly (requires AGENTVERIF_API_KEY) |\n| `/security status` | Agent trust score, active violations, session fingerprint |\n| `/security report` | Full violation report grouped by severity |\n| `/security taint-check ` | Check a string for LLM01 prompt injection |\n| `/security output-check ` | Check agent output for LLM02 insecure patterns |\n| `/security diff ` | Compare two scan sessions for regressions |\n| `/security badge` | Get your ✅ AgentVerif Certified badge |\n\n---\n\n## OWASP Coverage\n\n| Layer | What it catches | OWASP |\n|-------|----------------|-------|\n| **SCAN** | Prompt injection, credential leaks, insecure output, tool-call injection | LLM01, LLM02, LLM06, LLM08 |\n| **SIGN** | Cryptographic hash + License ID | — |\n| **VERIFY** | Tamper detection before execution | — |\n| **REVOKE** | Kill a license instantly | — |\n\n---\n\n## Exit Codes\n\n| Code | Meaning |\n|------|---------|\n| 0 | Clean — no violations, certificate valid |\n| 1 | Violations detected or certificate invalid |\n| 2 | Error — agentverif-sign not installed or bad arguments |\n\n---\n\n## Requirements\n\n- OpenClaw ≥ 0.1\n- Python ≥ 3.11\n- `agentverif-sign >= 0.2.0`: `pip install agentverif-sign`\n\n---\n\nBuilt by [agentverif.com](https://agentverif.com)\n\nFile v2.0.1:_meta.json\n\n{\n \"ownerId\": \"kn74kv6cjp1hk19qg6w8cet8xs84776n\",\n \"slug\": \"agentverif\",\n \"version\": \"2.0.1\",\n \"publishedAt\": 1776602940044\n}\n\nFile v2.0.1:package.json\n\n{\n \"name\": \"openclaw-skill-agentverif\",\n \"version\": \"2.0.1\",\n \"description\": \"✅ SCAN → SIGN → VERIFY. Certify your skill, detect tampering, revoke instantly. Full control over how your skill is distributed and run.\",\n \"homepage\": \"https://agentverif.com\",\n \"license\": \"MIT\",\n \"openclaw\": {\n \"type\": \"skill\",\n \"slug\": \"agentverif\",\n \"entry\": \"skill.py\",\n \"python-package\": \"agentverif-sign>=0.2.0\",\n \"requires\": {\n \"anyBins\": [\"python3\", \"python\"]\n },\n \"emoji\": \"✅\",\n \"badge\": \"✅ AgentVerif Certified\",\n \"env\": {\n \"AGENTVERIF_API_KEY\": {\n \"required\": false,\n \"description\": \"Required only for the revoke command.\"\n }\n },\n \"commands\": [\n \"scan\",\n \"verify\",\n \"sign\",\n \"revoke\",\n \"status\",\n \"report\",\n \"taint-check\",\n \"output-check\",\n \"diff\",\n \"badge\"\n ]\n },\n \"repository\": {\n \"type\": \"git\",\n \"url\": \"https://github.com/trusthandoff/agentverif\"\n }\n}\n\nArchive v2.0.0: 5 files, 9809 bytes\n\nFiles: package.json (773b), README.md (2102b), SKILL.md (3331b), skill.py (20237b), _meta.json (129b)\n\nFile v2.0.0:SKILL.md\n\n---\nname: agentverif\ndescription: \"OWASP LLM Top 10 security scanner + cryptographic verification for OpenClaw skills — detects prompt injection, credential leaks, and tampered packages before your agent runs them\"\nhomepage: https://agentverif.com\nuser-invocable: true\nmetadata: {\n \"openclaw\": {\n \"emoji\": \"🛡️\",\n \"badge\": \"✅ AgentVerif Certified\",\n \"requires\": { \"anyBins\": [\"python3\", \"python\"] }\n }\n}\n---\n\n# 🛡️ AgentVerif — OWASP Scan + Cryptographic Verification\n\n**AgentVerif** is the trust layer for OpenClaw skills.\nEvery skill you install or distribute is scanned against the\nOWASP LLM Top 10 and cryptographically verified —\nso you know it's authentic, unmodified, and safe to run.\n\nThe former **AgentCop Sentinel** is now **AgentVerif** —\nsame battle-tested OWASP scanner, now with cryptographic\nsigning, tamper detection, and license revocation built in.\n\nInstall in one line:\n```\nnpx clawhub@latest install agentverif\n```\n\n**Requires agentverif-sign (install once):**\n```\npip install agentverif-sign\n```\nThis skill never installs packages automatically.\nYou stay in control of your environment.\n\n---\n\n## What AgentVerif does\n\n| Layer | What it catches | OWASP |\n|-------|----------------|-------|\n| **SCAN** | Prompt injection, credential leaks, insecure output, tool-call injection | LLM01, LLM02, LLM06, LLM08 |\n| **SIGN** | Cryptographic hash + License ID — proves the skill is yours | — |\n| **VERIFY** | Tamper detection — catches modified versions before execution | — |\n| **REVOKE** | Kill a license instantly if the skill gets redistributed | — |\n\n---\n\n## Slash commands\n\n### /security scan [--last 1h|24h|7d] [--since ISO]\nScan current session for OWASP LLM Top 10 violations.\nScore 0–100. Below 70 = refused. Shows exact violations + fixes.\n\n### /security verify \nVerify a skill certificate against the agentverif.com registry.\nReturns: VERIFIED / TAMPERED / UNSIGNED / EXPIRED / REVOKED\n\n### /security sign \nSign a skill ZIP. OWASP scan runs first (score ≥ 70 required).\nInjects SIGNATURE.json. Issues a License ID.\n\n### /security revoke \nRevoke a license. Verification fails immediately for all buyers.\nRequires AGENTVERIF_API_KEY environment variable.\n\n### /security status\nAgent trust score, active violations, session fingerprint.\n\n### /security report\nFull violation report grouped by severity (CRITICAL → ERROR → WARN).\n\n### /security taint-check \nCheck a string for LLM01 prompt injection. Exit 1 if tainted.\n\n### /security output-check \nCheck agent output for LLM02 insecure patterns.\n\n### /security diff \nCompare two scan sessions — highlight regressions.\n\n### /security badge\nGet your ✅ AgentVerif Certified badge for your skill listing.\n\n---\n\n## Exit codes\n\n| Code | Meaning |\n|------|---------|\n| 0 | Clean — no violations, certificate valid |\n| 1 | Violations detected or certificate invalid |\n| 2 | Error — agentverif-sign not installed or bad arguments |\n\n---\n\n## Requirements\n\n- OpenClaw ≥ 0.1\n- Python ≥ 3.11\n- `agentverif-sign >= 0.2.0`:\n `pip install agentverif-sign`\n\nThis skill never auto-installs packages.\n\n---\n\nBuilt by [agentverif.com](https://agentverif.com)\nSource: [github.com/trusthandoff/agentverif](https://github.com/trusthandoff/agentverif)\n\nFile v2.0.0:README.md\n\n# 🛡️ AgentVerif — OpenClaw Skill\n\nOWASP LLM Top 10 scanner + cryptographic verification for every skill you install or distribute.\n\nInstall in one line:\n\n```bash\nnpx clawhub@latest install agentverif\n```\n\n**Requires agentverif-sign (install once):**\n\n```bash\npip install agentverif-sign\n```\n\nThis skill never installs packages automatically. You stay in control of your environment.\n\n---\n\n## Commands\n\n| Command | What it does |\n|---------|-------------|\n| `/security scan` | Scan current session for OWASP LLM Top 10 violations (score 0–100) |\n| `/security verify ` | Verify a skill certificate — VERIFIED / TAMPERED / UNSIGNED / REVOKED |\n| `/security sign ` | Sign a skill ZIP (OWASP scan runs first, score ≥ 70 required) |\n| `/security revoke ` | Revoke a license instantly (requires AGENTVERIF_API_KEY) |\n| `/security status` | Agent trust score, active violations, session fingerprint |\n| `/security report` | Full violation report grouped by severity |\n| `/security taint-check ` | Check a string for LLM01 prompt injection |\n| `/security output-check ` | Check agent output for LLM02 insecure patterns |\n| `/security diff ` | Compare two scan sessions for regressions |\n| `/security badge` | Get your ✅ AgentVerif Certified badge |\n\n---\n\n## OWASP Coverage\n\n| Layer | What it catches | OWASP |\n|-------|----------------|-------|\n| **SCAN** | Prompt injection, credential leaks, insecure output, tool-call injection | LLM01, LLM02, LLM06, LLM08 |\n| **SIGN** | Cryptographic hash + License ID | — |\n| **VERIFY** | Tamper detection before execution | — |\n| **REVOKE** | Kill a license instantly | — |\n\n---\n\n## Exit Codes\n\n| Code | Meaning |\n|------|---------|\n| 0 | Clean — no violations, certificate valid |\n| 1 | Violations detected or certificate invalid |\n| 2 | Error — agentverif-sign not installed or bad arguments |\n\n---\n\n## Requirements\n\n- OpenClaw ≥ 0.1\n- Python ≥ 3.11\n- `agentverif-sign >= 0.2.0`: `pip install agentverif-sign`\n\n---\n\nBuilt by [agentverif.com](https://agentverif.com)\n\nFile v2.0.0:_meta.json\n\n{\n \"ownerId\": \"kn74kv6cjp1hk19qg6w8cet8xs84776n\",\n \"slug\": \"agentverif\",\n \"version\": \"2.0.0\",\n \"publishedAt\": 1776602313464\n}\n\nFile v2.0.0:package.json\n\n{\n \"name\": \"openclaw-skill-agentverif\",\n \"version\": \"1.0.0\",\n \"description\": \"OWASP LLM Top 10 scanner + cryptographic verification for OpenClaw skills\",\n \"homepage\": \"https://agentverif.com\",\n \"license\": \"MIT\",\n \"openclaw\": {\n \"type\": \"skill\",\n \"slug\": \"agentverif\",\n \"entry\": \"skill.py\",\n \"python-package\": \"agentverif-sign>=0.2.0\",\n \"requires\": {\n \"anyBins\": [\"python3\", \"python\"]\n },\n \"emoji\": \"🛡️\",\n \"badge\": \"✅ AgentVerif Certified\",\n \"commands\": [\n \"scan\",\n \"verify\",\n \"sign\",\n \"revoke\",\n \"status\",\n \"report\",\n \"taint-check\",\n \"output-check\",\n \"diff\",\n \"badge\"\n ]\n },\n \"repository\": {\n \"type\": \"git\",\n \"url\": \"https://github.com/trusthandoff/agentverif\"\n }\n}\n\nArchive v1.0.2: 5 files, 11628 bytes\n\nFiles: package.json (674b), README.md (2514b), SKILL.md (5205b), skill.py (24546b), _meta.json (129b)\n\nFile v1.0.2:SKILL.md\n\n---\nname: agentcop\ndescription: \"Catches prompt injection hidden in untrusted external content, tool results, and agent-to-agent communication — plus credential exfiltration, token smuggling, and insecure output — before your agent acts on them\"\nhomepage: https://agentcop.live\nuser-invocable: true\nmetadata: { \"openclaw\": { \"emoji\": \"🔒\", \"requires\": { \"anyBins\": [\"python3\", \"python\"] } } }\n---\n\n# AgentCop Security Skill\n\n**AgentCop** is a real-time security monitor for OpenClaw agents. Every message, tool call, and tool result is scanned for OWASP LLM Top 10 violations — including the indirect injection attacks that hide inside retrieved web pages, file contents, agent-to-agent messages, and any other untrusted external content your agent reads and acts on.\n\nInstall in one line:\n```\nopenclaw skill install agentcop\n```\n\n---\n\n## What it catches\n\n| Threat | OWASP | Detection method |\n|--------|-------|-----------------|\n| Direct prompt injection (\"ignore instructions\") | LLM01 | 14 override patterns + role-playing jailbreaks + token smuggling |\n| Encoded/obfuscated injections | LLM01 | Base64, ROT13, unicode escapes (`\\u0041`), leetspeak |\n| Indirect injection (web pages, files, agent-to-agent communication) | LLM01 | Multi-turn continuation markers (\"as I mentioned\", \"continuing from before\") |\n| Tool-call argument injection | LLM08 | Full injection scan on tool names + serialised arguments |\n| Credential exfiltration in tool results | LLM06 | API keys, tokens, private keys, AWS credentials, bearer tokens |\n| Insecure output (code execution sinks) | LLM02 | eval, exec, script injection, path traversal, shell escapes |\n\nViolations carry a **confidence score**: 1–2 signals → WARN, 3–4 → ERROR, 5+ → CRITICAL.\n\n---\n\n## Slash commands\n\n### /security status\n```\npython3 ~/.openclaw/skills/agentcop/skill.py status\n```\nShow agent identity fingerprint, trust score (0–1.0), number of buffered events, and all active violations with confidence scores. Report each field clearly. Exit 0 = clean, exit 1 = violations present.\n\n### /security report\n```\npython3 ~/.openclaw/skills/agentcop/skill.py report\n```\nFull violation report grouped by severity (CRITICAL → ERROR → WARN). For each violation show: `violation_type`, `severity`, `confidence`, OWASP category, and the matched `signals` list. If `\"no_violations\": true`, tell the user the session is clean.\n\n### /security scan [target] [--last 1h|24h|7d] [--since ISO]\n```\npython3 ~/.openclaw/skills/agentcop/skill.py scan\npython3 ~/.openclaw/skills/agentcop/skill.py scan --last 1h\npython3 ~/.openclaw/skills/agentcop/skill.py scan --last 24h\npython3 ~/.openclaw/skills/agentcop/skill.py scan --since 2026-04-04T10:00:00Z\n```\nScan buffered events for violations. Use `--last` or `--since` to scope the window for post-incident forensics. Each scan is automatically saved as a session snapshot (shown as `scan_id` in the output) — save that ID to use with `diff` later. Exit 0 = clean, exit 1 = findings.\n\n### /security taint-check \n```\npython3 ~/.openclaw/skills/agentcop/skill.py taint-check \"text to check\"\ncat prompt.txt | python3 ~/.openclaw/skills/agentcop/skill.py taint-check --stdin\n```\nCheck a single string for LLM01 prompt injection. Pipeable via `--stdin`. Report `tainted: true/false`, the matched signals, and the confidence level. Exit 1 if tainted.\n\n### /security output-check \n```\npython3 ~/.openclaw/skills/agentcop/skill.py output-check \"agent output to check\"\npython3 ~/.openclaw/skills/agentcop/skill.py output-check --stdin\n```\nCheck agent output for LLM02 insecure patterns (eval, exec, script injection, path traversal, shell commands). Report `unsafe: true/false` and the matched patterns. Exit 1 if unsafe.\n\n### /security diff \n```\npython3 ~/.openclaw/skills/agentcop/skill.py diff abc12345 def67890\n```\nCompare two scan sessions (by `scan_id` from prior `scan` runs). Shows:\n- `new_violations`: findings in session2 that weren't in session1 — these are regressions\n- `resolved_violation_types`: violation types present in session1 but gone in session2\n\nUse this after applying a fix to verify it actually resolved the violation. Exit 0 = no regressions, exit 1 = new violations introduced.\n\n### /security badge\n```\npython3 ~/.openclaw/skills/agentcop/skill.py badge\n```\nGet your agentcop badge at agentcop.live/badge — free, no signup required.\n\n---\n\n## Exit codes (all commands)\n\n| Code | Meaning |\n|------|---------|\n| 0 | Clean — no violations found |\n| 1 | Violations detected — JSON output still printed |\n| 2 | Error — agentcop unavailable, bad arguments, or API failure |\n\n---\n\n## Background monitoring\n\nAutomatic per-message alerts require the `agentcop-monitor` hook:\n```\nopenclaw hooks enable agentcop-monitor\n```\nWithout it, all `/security` commands work on demand but no real-time alerts fire during the conversation.\n\n## Error handling\n\nIf the script exits 2 or prints `AGENTCOP_UNAVAILABLE`, tell the user:\n> AgentCop is not installed. Run `pip install agentcop` then retry.\n\nNever block the conversation waiting for the script — if it takes more than 5 seconds, report a timeout and suggest the user run it manually.\n\nFile v1.0.2:README.md\n\n# AgentCop — OpenClaw Security Skill\n\nOWASP LLM Top 10 monitoring for every conversation. Taint-checks inbound\nmessages, scans outbound content, and sends violation alerts directly to your\nchat channel.\n\n## Install\n\n```bash\nopenclaw skills install agentcop\n```\n\nOr manually:\n\n```bash\ncp -r skills/agentcop ~/.openclaw/skills/agentcop\ncp -r hooks/agentcop-monitor ~/.openclaw/hooks/agentcop-monitor\nopenclaw hooks enable agentcop-monitor\n```\n\n## Commands\n\n| Command | What it does |\n|---|---|\n| `/security status` | Agent identity fingerprint, trust score, violation count |\n| `/security report` | Full violation report grouped by severity |\n| `/security scan` | OWASP LLM Top 10 assessment of the current session |\n| `/security scan ` | Scan a named agent, URL, or resource |\n\n## What it monitors\n\n| OWASP ID | Category | How |\n|---|---|---|\n| LLM01 | Prompt Injection | Pattern-matches inbound messages before agent processing |\n| LLM02 | Insecure Output Handling | Scans agent responses for code-execution sinks |\n| LLM07 | Insecure Plugin Design | Stale-capability detector via `Sentinel` |\n| LLM08 | Excessive Agency | Rejected-packet detector via `Sentinel` |\n\nBackground monitoring runs automatically via the `agentcop-monitor` hook on\nevery `message:received` and `message:sent` event.\n\n## Example violation alert\n\nTelegram / WhatsApp:\n\n```\n🚨 AgentCop [CRITICAL] — LLM01 LLM01_prompt_injection\nMatched: `ignore previous instructions`, `system prompt:`\nContext: inbound message\n```\n\nDiscord:\n\n```\n🚨 **AgentCop [ERROR]** — LLM02 LLM02_insecure_output\nMatched: `eval(`, `os.system(`\nContext: agent response\n```\n\n## Agent identity & trust score\n\nOn first run, `skill.py` calls `AgentIdentity.register()` to fingerprint\nthis OpenClaw instance and create a behavioral baseline. Subsequent runs\ncompare tool-call patterns and execution times against the baseline — drift\ntriggers a `WARN` violation.\n\nState is persisted at `~/.openclaw/agentcop/` (SQLite + JSONL event log).\n\n## Graceful degradation\n\nIf `agentcop` is not installed, the hook pushes one warning to the channel and\nthen stays silent — it never blocks messages or crashes the gateway.\n\nSet `AGENTCOP_NO_AUTOINSTALL=1` to disable automatic `pip install` on first use.\n\n## Full scan report\n\nVisit [agentcop.live](https://agentcop.live) to run a full OWASP LLM Top 10\nassessment against your agent pipeline.\n\n## Requirements\n\n- OpenClaw ≥ 0.1\n- Python ≥ 3.11\n- `agentcop >= 0.4` (auto-installed on first `/security` command)\n\nFile v1.0.2:_meta.json\n\n{\n \"ownerId\": \"kn74kv6cjp1hk19qg6w8cet8xs84776n\",\n \"slug\": \"agentverif\",\n \"version\": \"1.0.2\",\n \"publishedAt\": 1776149459671\n}\n\nFile v1.0.2:package.json\n\n{\n \"name\": \"openclaw-skill-agentcop\",\n \"version\": \"0.4.2\",\n \"description\": \"OWASP LLM Top 10 security monitor for OpenClaw — taint-checks messages, detects violations, alerts on policy breaches\",\n \"keywords\": [\"security\", \"owasp\", \"llm\", \"monitoring\", \"agentcop\", \"audit\", \"openclaw\"],\n \"homepage\": \"https://agentcop.live\",\n \"repository\": {\n \"type\": \"git\",\n \"url\": \"https://github.com/trusthandoff/agentcop\"\n },\n \"license\": \"MIT\",\n \"authors\": [\n \"Shay Mizuno\",\n \"Hind Tagmouti\"\n ],\n \"openclaw\": {\n \"type\": \"skill\",\n \"slug\": \"agentcop\",\n \"clawhub\": true,\n \"companion-hook\": \"agentcop-monitor\",\n \"python-package\": \"agentcop>=0.4\"\n }\n}\n\nArchive v1.0.1: 5 files, 13156 bytes\n\nFiles: package.json (674b), README.md (2514b), SKILL.md (5723b), skill.py (29841b), _meta.json (129b)\n\nFile v1.0.1:SKILL.md\n\n---\nname: agentcop\ndescription: \"Catches prompt injection hidden in Moltbook docs, tool results, and external content — plus credential exfiltration, token smuggling, and insecure output — before your agent acts on them\"\nhomepage: https://agentcop.live\nuser-invocable: true\nmetadata: { \"openclaw\": { \"emoji\": \"🔒\", \"requires\": { \"anyBins\": [\"python3\", \"python\"] } } }\n---\n\n# AgentCop Security Skill\n\n**AgentCop** is a real-time security monitor for OpenClaw agents. Every message, tool call, and tool result is scanned for OWASP LLM Top 10 violations — including the indirect injection attacks that hide inside Moltbook documents, retrieved web pages, file contents, and any other external data your agent reads and acts on.\n\nInstall in one line:\n```\nopenclaw skill install agentcop\n```\n\n---\n\n## What it catches\n\n| Threat | OWASP | Detection method |\n|--------|-------|-----------------|\n| Direct prompt injection (\"ignore instructions\") | LLM01 | 14 override patterns + role-playing jailbreaks + token smuggling |\n| Encoded/obfuscated injections | LLM01 | Base64, ROT13, unicode escapes (`\\u0041`), leetspeak |\n| Indirect injection (Moltbook docs, web pages, files) | LLM01 | Multi-turn continuation markers (\"as I mentioned\", \"continuing from before\") |\n| Tool-call argument injection | LLM08 | Full injection scan on tool names + serialised arguments |\n| Credential exfiltration in tool results | LLM06 | API keys, tokens, private keys, AWS credentials, bearer tokens |\n| Insecure output (code execution sinks) | LLM02 | eval, exec, script injection, path traversal, shell escapes |\n\nViolations carry a **confidence score**: 1–2 signals → WARN, 3–4 → ERROR, 5+ → CRITICAL.\n\n---\n\n## Slash commands\n\n### /security status\n```\npython3 ~/.openclaw/skills/agentcop/skill.py status\n```\nShow agent identity fingerprint, trust score (0–1.0), number of buffered events, and all active violations with confidence scores. Report each field clearly. Exit 0 = clean, exit 1 = violations present.\n\n### /security report\n```\npython3 ~/.openclaw/skills/agentcop/skill.py report\n```\nFull violation report grouped by severity (CRITICAL → ERROR → WARN). For each violation show: `violation_type`, `severity`, `confidence`, OWASP category, and the matched `signals` list. If `\"no_violations\": true`, tell the user the session is clean.\n\n### /security scan [target] [--last 1h|24h|7d] [--since ISO]\n```\npython3 ~/.openclaw/skills/agentcop/skill.py scan\npython3 ~/.openclaw/skills/agentcop/skill.py scan --last 1h\npython3 ~/.openclaw/skills/agentcop/skill.py scan --last 24h\npython3 ~/.openclaw/skills/agentcop/skill.py scan --since 2026-04-04T10:00:00Z\n```\nScan buffered events for violations. Use `--last` or `--since` to scope the window for post-incident forensics. Each scan is automatically saved as a session snapshot (shown as `scan_id` in the output) — save that ID to use with `diff` later. Exit 0 = clean, exit 1 = findings.\n\n### /security taint-check \n```\npython3 ~/.openclaw/skills/agentcop/skill.py taint-check \"text to check\"\ncat prompt.txt | python3 ~/.openclaw/skills/agentcop/skill.py taint-check --stdin\n```\nCheck a single string for LLM01 prompt injection. Pipeable via `--stdin`. Report `tainted: true/false`, the matched signals, and the confidence level. Exit 1 if tainted.\n\n### /security output-check \n```\npython3 ~/.openclaw/skills/agentcop/skill.py output-check \"agent output to check\"\npython3 ~/.openclaw/skills/agentcop/skill.py output-check --stdin\n```\nCheck agent output for LLM02 insecure patterns (eval, exec, script injection, path traversal, shell commands). Report `unsafe: true/false` and the matched patterns. Exit 1 if unsafe.\n\n### /security diff \n```\npython3 ~/.openclaw/skills/agentcop/skill.py diff abc12345 def67890\n```\nCompare two scan sessions (by `scan_id` from prior `scan` runs). Shows:\n- `new_violations`: findings in session2 that weren't in session1 — these are regressions\n- `resolved_violation_types`: violation types present in session1 but gone in session2\n\nUse this after applying a fix to verify it actually resolved the violation. Exit 0 = no regressions, exit 1 = new violations introduced.\n\n### /security badge generate|verify|renew|revoke|status|markdown\n```\npython3 ~/.openclaw/skills/agentcop/skill.py badge generate\npython3 ~/.openclaw/skills/agentcop/skill.py badge status\npython3 ~/.openclaw/skills/agentcop/skill.py badge verify \npython3 ~/.openclaw/skills/agentcop/skill.py badge renew \npython3 ~/.openclaw/skills/agentcop/skill.py badge revoke \npython3 ~/.openclaw/skills/agentcop/skill.py badge markdown \n```\nManage ClawHub security badges for this agent via the agentcop.live API. `generate` issues a new badge. `status` shows the current badge validity and expiry. `markdown` prints a README snippet for copy-paste. Print the output directly — it is already formatted.\n\n---\n\n## Exit codes (all commands)\n\n| Code | Meaning |\n|------|---------|\n| 0 | Clean — no violations found |\n| 1 | Violations detected — JSON output still printed |\n| 2 | Error — agentcop unavailable, bad arguments, or API failure |\n\n---\n\n## Background monitoring\n\nAutomatic per-message alerts require the `agentcop-monitor` hook:\n```\nopenclaw hooks enable agentcop-monitor\n```\nWithout it, all `/security` commands work on demand but no real-time alerts fire during the conversation.\n\n## Error handling\n\nIf the script exits 2 or prints `AGENTCOP_UNAVAILABLE`, tell the user:\n> AgentCop is not installed. Run `pip install agentcop` then retry.\n\nNever block the conversation waiting for the script — if it takes more than 5 seconds, report a timeout and suggest the user run it manually.\n\nFile v1.0.1:README.md\n\n# AgentCop — OpenClaw Security Skill\n\nOWASP LLM Top 10 monitoring for every conversation. Taint-checks inbound\nmessages, scans outbound content, and sends violation alerts directly to your\nchat channel.\n\n## Install\n\n```bash\nopenclaw skills install agentcop\n```\n\nOr manually:\n\n```bash\ncp -r skills/agentcop ~/.openclaw/skills/agentcop\ncp -r hooks/agentcop-monitor ~/.openclaw/hooks/agentcop-monitor\nopenclaw hooks enable agentcop-monitor\n```\n\n## Commands\n\n| Command | What it does |\n|---|---|\n| `/security status` | Agent identity fingerprint, trust score, violation count |\n| `/security report` | Full violation report grouped by severity |\n| `/security scan` | OWASP LLM Top 10 assessment of the current session |\n| `/security scan ` | Scan a named agent, URL, or resource |\n\n## What it monitors\n\n| OWASP ID | Category | How |\n|---|---|---|\n| LLM01 | Prompt Injection | Pattern-matches inbound messages before agent processing |\n| LLM02 | Insecure Output Handling | Scans agent responses for code-execution sinks |\n| LLM07 | Insecure Plugin Design | Stale-capability detector via `Sentinel` |\n| LLM08 | Excessive Agency | Rejected-packet detector via `Sentinel` |\n\nBackground monitoring runs automatically via the `agentcop-monitor` hook on\nevery `message:received` and `message:sent` event.\n\n## Example violation alert\n\nTelegram / WhatsApp:\n\n```\n🚨 AgentCop [CRITICAL] — LLM01 LLM01_prompt_injection\nMatched: `ignore previous instructions`, `system prompt:`\nContext: inbound message\n```\n\nDiscord:\n\n```\n🚨 **AgentCop [ERROR]** — LLM02 LLM02_insecure_output\nMatched: `eval(`, `os.system(`\nContext: agent response\n```\n\n## Agent identity & trust score\n\nOn first run, `skill.py` calls `AgentIdentity.register()` to fingerprint\nthis OpenClaw instance and create a behavioral baseline. Subsequent runs\ncompare tool-call patterns and execution times against the baseline — drift\ntriggers a `WARN` violation.\n\nState is persisted at `~/.openclaw/agentcop/` (SQLite + JSONL event log).\n\n## Graceful degradation\n\nIf `agentcop` is not installed, the hook pushes one warning to the channel and\nthen stays silent — it never blocks messages or crashes the gateway.\n\nSet `AGENTCOP_NO_AUTOINSTALL=1` to disable automatic `pip install` on first use.\n\n## Full scan report\n\nVisit [agentcop.live](https://agentcop.live) to run a full OWASP LLM Top 10\nassessment against your agent pipeline.\n\n## Requirements\n\n- OpenClaw ≥ 0.1\n- Python ≥ 3.11\n- `agentcop >= 0.4` (auto-installed on first `/security` command)\n\nFile v1.0.1:_meta.json\n\n{\n \"ownerId\": \"kn74kv6cjp1hk19qg6w8cet8xs84776n\",\n \"slug\": \"agentverif\",\n \"version\": \"1.0.1\",\n \"publishedAt\": 1775299497189\n}\n\nFile v1.0.1:package.json\n\n{\n \"name\": \"openclaw-skill-agentcop\",\n \"version\": \"0.4.2\",\n \"description\": \"OWASP LLM Top 10 security monitor for OpenClaw — taint-checks messages, detects violations, alerts on policy breaches\",\n \"keywords\": [\"security\", \"owasp\", \"llm\", \"monitoring\", \"agentcop\", \"audit\", \"openclaw\"],\n \"homepage\": \"https://agentcop.live\",\n \"repository\": {\n \"type\": \"git\",\n \"url\": \"https://github.com/trusthandoff/agentcop\"\n },\n \"license\": \"MIT\",\n \"authors\": [\n \"Shay Mizuno\",\n \"Hind Tagmouti\"\n ],\n \"openclaw\": {\n \"type\": \"skill\",\n \"slug\": \"agentcop\",\n \"clawhub\": true,\n \"companion-hook\": \"agentcop-monitor\",\n \"python-package\": \"agentcop>=0.4\"\n }\n}\n\nArchive v1.0.0: 5 files, 8366 bytes\n\nFiles: package.json (674b), README.md (2514b), SKILL.md (2249b), skill.py (20696b), _meta.json (129b)\n\nFile v1.0.0:SKILL.md\n\n---\nname: agentcop\ndescription: \"OWASP LLM Top 10 security monitor — taint-checks messages, detects violations, alerts on policy breaches in real time\"\nhomepage: https://agentcop.live\nuser-invocable: true\nmetadata: { \"openclaw\": { \"emoji\": \"🔒\", \"requires\": { \"anyBins\": [\"python3\", \"python\"] } } }\n---\n\n# AgentCop Security Skill\n\nYou are now equipped with AgentCop — a forensic security monitor for OWASP LLM Top 10 violations. The skill bridge is at `~/.openclaw/skills/agentcop/skill.py`.\n\n## Commands\n\n### /security status\nRun:\n```\npython3 ~/.openclaw/skills/agentcop/skill.py status\n```\nThen report: agent identity fingerprint, trust score (0–1.0), number of events buffered, active watch thread status, and any violations detected since startup. Format it clearly for the user.\n\n### /security report\nRun:\n```\npython3 ~/.openclaw/skills/agentcop/skill.py report\n```\nParse the JSON output and present a formatted violation report grouped by severity (CRITICAL → ERROR → WARN). For each violation show: type, severity, detected_at, and detail fields. If the output contains `\"no_violations\": true`, tell the user the session is clean.\n\n### /security scan [target]\nRun:\n```\npython3 ~/.openclaw/skills/agentcop/skill.py scan [target]\n```\nwhere `[target]` is the optional argument the user provided (e.g. a URL, agent name, or \"session\"). Present results as a structured security assessment with OWASP LLM category labels (LLM01–LLM10).\n\n## Error handling\nIf the script exits non-zero or prints `AGENTCOP_UNAVAILABLE`, tell the user:\n> AgentCop is not installed. Run `pip install agentcop` then retry.\n\nNever block the conversation waiting for the script — if it takes more than 5 seconds, report a timeout and suggest the user run it manually.\n\n## Background monitoring\nAutomatic security alerts require the `agentcop-monitor` hook to be installed and enabled alongside this skill (`openclaw hooks enable agentcop-monitor`). The hook checks every inbound message for prompt injection (LLM01), every outbound message for insecure output patterns (LLM02), and every tool result before it is written to the session transcript. If the hook is not enabled, the `/security` commands still work on demand but no automatic alerts are sent.\n\nFile v1.0.0:README.md\n\n# AgentCop — OpenClaw Security Skill\n\nOWASP LLM Top 10 monitoring for every conversation. Taint-checks inbound\nmessages, scans outbound content, and sends violation alerts directly to your\nchat channel.\n\n## Install\n\n```bash\nopenclaw skills install agentcop\n```\n\nOr manually:\n\n```bash\ncp -r skills/agentcop ~/.openclaw/skills/agentcop\ncp -r hooks/agentcop-monitor ~/.openclaw/hooks/agentcop-monitor\nopenclaw hooks enable agentcop-monitor\n```\n\n## Commands\n\n| Command | What it does |\n|---|---|\n| `/security status` | Agent identity fingerprint, trust score, violation count |\n| `/security report` | Full violation report grouped by severity |\n| `/security scan` | OWASP LLM Top 10 assessment of the current session |\n| `/security scan ` | Scan a named agent, URL, or resource |\n\n## What it monitors\n\n| OWASP ID | Category | How |\n|---|---|---|\n| LLM01 | Prompt Injection | Pattern-matches inbound messages before agent processing |\n| LLM02 | Insecure Output Handling | Scans agent responses for code-execution sinks |\n| LLM07 | Insecure Plugin Design | Stale-capability detector via `Sentinel` |\n| LLM08 | Excessive Agency | Rejected-packet detector via `Sentinel` |\n\nBackground monitoring runs automatically via the `agentcop-monitor` hook on\nevery `message:received` and `message:sent` event.\n\n## Example violation alert\n\nTelegram / WhatsApp:\n\n```\n🚨 AgentCop [CRITICAL] — LLM01 LLM01_prompt_injection\nMatched: `ignore previous instructions`, `system prompt:`\nContext: inbound message\n```\n\nDiscord:\n\n```\n🚨 **AgentCop [ERROR]** — LLM02 LLM02_insecure_output\nMatched: `eval(`, `os.system(`\nContext: agent response\n```\n\n## Agent identity & trust score\n\nOn first run, `skill.py` calls `AgentIdentity.register()` to fingerprint\nthis OpenClaw instance and create a behavioral baseline. Subsequent runs\ncompare tool-call patterns and execution times against the baseline — drift\ntriggers a `WARN` violation.\n\nState is persisted at `~/.openclaw/agentcop/` (SQLite + JSONL event log).\n\n## Graceful degradation\n\nIf `agentcop` is not installed, the hook pushes one warning to the channel and\nthen stays silent — it never blocks messages or crashes the gateway.\n\nSet `AGENTCOP_NO_AUTOINSTALL=1` to disable automatic `pip install` on first use.\n\n## Full scan report\n\nVisit [agentcop.live](https://agentcop.live) to run a full OWASP LLM Top 10\nassessment against your agent pipeline.\n\n## Requirements\n\n- OpenClaw ≥ 0.1\n- Python ≥ 3.11\n- `agentcop >= 0.4` (auto-installed on first `/security` command)\n\nFile v1.0.0:_meta.json\n\n{\n \"ownerId\": \"kn74kv6cjp1hk19qg6w8cet8xs84776n\",\n \"slug\": \"agentverif\",\n \"version\": \"1.0.0\",\n \"publishedAt\": 1775297710184\n}\n\nFile v1.0.0:package.json\n\n{\n \"name\": \"openclaw-skill-agentcop\",\n \"version\": \"0.4.2\",\n \"description\": \"OWASP LLM Top 10 security monitor for OpenClaw — taint-checks messages, detects violations, alerts on policy breaches\",\n \"keywords\": [\"security\", \"owasp\", \"llm\", \"monitoring\", \"agentcop\", \"audit\", \"openclaw\"],\n \"homepage\": \"https://agentcop.live\",\n \"repository\": {\n \"type\": \"git\",\n \"url\": \"https://github.com/trusthandoff/agentcop\"\n },\n \"license\": \"MIT\",\n \"authors\": [\n \"Shay Mizuno\",\n \"Hind Tagmouti\"\n ],\n \"openclaw\": {\n \"type\": \"skill\",\n \"slug\": \"agentcop\",\n \"clawhub\": true,\n \"companion-hook\": \"agentcop-monitor\",\n \"python-package\": \"agentcop>=0.4\"\n }\n}","readmeExcerpt":"Skill: ✅ AgentVerif — Scan. Sign. Verify. Control your distribution. Owner: shaymizuno Summary: SCAN → SIGN → VERIFY. Certify your skill, detect tampering, revoke instantly. Full control over how your skill is distributed and run. Requires AGENTVERIF_AP... Tags: agentcop:1.0.0, agents:1.0.1, latest:2.0.6, malware:1.0.1, monitoring:1.0.0, owasp:1.0.0, promp injections:1.0.1, security:1.0.1, sentinel:1.0.0 Version hist","codeSnippets":[],"executableExamples":[{"language":"text","snippet":"npx clawhub@latest install agentverif"},{"language":"text","snippet":"pip install agentverif-sign"},{"language":"bash","snippet":"npx clawhub@latest install agentverif"},{"language":"bash","snippet":"pip install agentverif-sign"},{"language":"text","snippet":"npx clawhub@latest install agentverif"},{"language":"text","snippet":"pip install agentverif-sign"}],"parameters":null,"dependencies":[],"permissions":[],"extractedFiles":[{"path":"SKILL.md","content":"---\nname: agentverif\ndescription: \"SCAN → SIGN → VERIFY. Certify your skill, detect tampering, revoke instantly. Full control over how your skill is distributed and run. Requires AGENTVERIF_API_KEY for revoke.\"\nhomepage: https://agentverif.com\nuser-invocable: true\nmetadata: {\n \"openclaw\": {\n \"emoji\": \"✅\",\n \"badge\": \"✅ AgentVerif Certified\",\n \"requires\": { \"anyBins\": [\"python3\", \"python\"] }\n }\n}\n---\n\n# ✅ AgentVerif — OWASP Scan + Cryptographic Verification\n\n---\n✅ AgentVerif Certified\n⭐ Score: 100/100 · 🔑 AC-FA10-EB04\nclawhub.ai/agentverif\n---\n\n**AgentVerif** is the trust layer for OpenClaw skills.\nEvery skill you install or distribute is scanned against the\nOWASP LLM Top 10 and cryptographically verified —\nso you know it's authentic, unmodified, and safe to run.\n\nThe former **AgentCop Sentinel** is now **AgentVerif** —\nsame battle-tested OWASP scanner, now with cryptographic\nsigning, tamper detection, and license revocation built in.\n\nInstall in one line:\n```\nnpx clawhub@latest install agentverif\n```\n\n**Requires agentverif-sign (install once):**\n```\npip install agentverif-sign\n```\nThis skill never installs packages automatically.\nYou stay in control of your environment.\n\n---\n\n## What AgentVerif does\n\n| Layer | What it catches | OWASP |\n|-------|----------------|-------|\n| **SCAN** | Prompt injection, credential leaks, insecure output, tool-call injection | LLM01, LLM02, LLM06, LLM08 |\n| **SIGN** | Cryptographic hash + License ID — proves the skill is yours | — |\n| **VERIFY** | Tamper detection — catches modified versions before execution | — |\n| **REVOKE** | Kill a license instantly if the skill gets redistributed | — |\n\n---\n\n## Slash commands\n\n### /security scan [--last 1h|24h|7d] [--since ISO]\nScan current session for OWASP LLM Top 10 violations.\nScore 0–100. Below 70 = refused. Shows exact violations + fixes.\n\n### /security verify \nVerify a skill certificate against the agentverif.com registry.\nReturns: VERIFIED / TAMPERED / UNSIGNED / EXPIRED / REVOKED\n\n### /security sign \nSign a skill ZIP. OWASP scan runs first (score ≥ 70 required).\nInjects SIGNATURE.json. Issues a License ID.\n\n### /security revoke \nRevoke a license. Verification fails immediately for all buyers.\nRequires AGENTVERIF_API_KEY environment variable.\n\n### /security status\nReports that this skill is stateless — no local session data stored.\nRun `/security scan` to get a live score.\n\n### /security report\nFull violation report grouped by severity (CRITICAL → ERROR → WARN).\nReads from stdin — pipe session context or text to scan.\n\n### /security taint-check \nCheck a string for LLM01 prompt injection. Exit 1 if tainted.\n\n### /security output-check \nCheck agent output for LLM02 insecure patterns.\n\n### /security diff \nNot supported — this skill is stateless and stores no session history.\n\n### /security badge\nGet your ✅ AgentVerif Certified badge for your skill listing.\n\n---\n\n## Privacy & data\n\n**Network"},{"path":"README.md","content":"# 🛡️ AgentVerif — OpenClaw Skill\n\nOWASP LLM Top 10 scanner + cryptographic verification for every skill you install or distribute.\n\nInstall in one line:\n\n```bash\nnpx clawhub@latest install agentverif\n```\n\n**Requires agentverif-sign (install once):**\n\n```bash\npip install agentverif-sign\n```\n\nThis skill never installs packages automatically. You stay in control of your environment.\n\n---\n\n## Commands\n\n| Command | What it does |\n|---------|-------------|\n| `/security scan` | Scan current session for OWASP LLM Top 10 violations (score 0–100) |\n| `/security verify ` | Verify a skill certificate — VERIFIED / TAMPERED / UNSIGNED / REVOKED |\n| `/security sign ` | Sign a skill ZIP (OWASP scan runs first, score ≥ 70 required) |\n| `/security revoke ` | Revoke a license instantly (requires AGENTVERIF_API_KEY) |\n| `/security status` | Agent trust score, active violations, session fingerprint |\n| `/security report` | Full violation report grouped by severity |\n| `/security taint-check ` | Check a string for LLM01 prompt injection |\n| `/security output-check ` | Check agent output for LLM02 insecure patterns |\n| `/security diff ` | Compare two scan sessions for regressions |\n| `/security badge` | Get your ✅ AgentVerif Certified badge |\n\n---\n\n## OWASP Coverage\n\n| Layer | What it catches | OWASP |\n|-------|----------------|-------|\n| **SCAN** | Prompt injection, credential leaks, insecure output, tool-call injection | LLM01, LLM02, LLM06, LLM08 |\n| **SIGN** | Cryptographic hash + License ID | — |\n| **VERIFY** | Tamper detection before execution | — |\n| **REVOKE** | Kill a license instantly | — |\n\n---\n\n## Exit Codes\n\n| Code | Meaning |\n|------|---------|\n| 0 | Clean — no violations, certificate valid |\n| 1 | Violations detected or certificate invalid |\n| 2 | Error — agentverif-sign not installed or bad arguments |\n\n---\n\n## Requirements\n\n- OpenClaw ≥ 0.1\n- Python ≥ 3.11\n- `agentverif-sign >= 0.2.0`: `pip install agentverif-sign`\n\n---\n\nBuilt by [agentverif.com](https://agentverif.com)"},{"path":"_meta.json","content":"{\n \"ownerId\": \"kn74kv6cjp1hk19qg6w8cet8xs84776n\",\n \"slug\": \"agentverif\",\n \"version\": \"2.0.6\",\n \"publishedAt\": 1776872916417\n}"},{"path":"skill-card.md","content":"## Description:\n\nAgentVerif scans skill content for OWASP LLM risks, signs skill ZIPs, verifies skill certificates, and supports license revocation for controlled distribution.\n\nThis skill is ready for commercial/non-commercial use.\n\n## Publisher:\n\n[shaymizuno](https://clawhub.ai/user/shaymizuno)\n\n### License/Terms of Use:\n\nMIT-0\n\n## Use Case:\n\nDevelopers and skill publishers use AgentVerif to scan OpenClaw skills for common LLM security issues, sign distributable ZIP archives, verify certificates, and revoke licenses when distribution must be controlled.\n\n### Deployment Geography for Use:\n\nGlobal\n\n## Known Risks and Mitigations:\n\nRisk: Skill archives can be uploaded to the configured AgentVerif endpoint during scan or sign operations.\n\nMitigation: Review archive contents first and do not submit ZIPs containing secrets, credentials, or proprietary material unless sharing them with that endpoint is acceptable.\n\nRisk: The sign command can modify ZIP files in place.\n\nMitigation: Keep a backup copy of the original archive before signing.\n\nRisk: Fixed certification text may overstate assurance if users treat it as a fresh scan result.\n\nMitigation: Verify the release and review current scan output before relying on certification claims.\n\nRisk: Unpinned installer or dependency versions can change behavior after installation.\n\nMitigation: Use pinned versions for the ClawHub installer and the agentverif-sign dependency in controlled environments.\n\n## Reference(s):\n\n- [ClawHub skill listing](https://clawhub.ai/shaymizuno/skills/agentverif)\n- [Publisher profile](https://clawhub.ai/user/shaymizuno)\n- [AgentVerif homepage](https://agentverif.com)\n- [AgentVerif documentation](https://agentverif.com/docs)\n\n## Skill Output:\n\n**Output Type(s):** [text, markdown, JSON, shell commands, configuration, guidance]\n\n**Output Format:** [JSON and text responses with optional Markdown badge output and shell command guidance]\n\n**Output Parameters:** [1D]\n\n**Other Properties Related to Output:** [Commands return process exit codes for pass, fail, and argument or dependency errors.]\n\n## Skill Version(s):\n\n2.0.6 (source: server release evidence)\n\n## Ethical Considerations:\n\nUsers should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment."},{"path":"package.json","content":"{\n \"name\": \"openclaw-skill-agentverif\",\n \"version\": \"2.0.1\",\n \"description\": \"✅ SCAN → SIGN → VERIFY. Certify your skill, detect tampering, revoke instantly. Full control over how your skill is distributed and run.\",\n \"homepage\": \"https://agentverif.com\",\n \"license\": \"MIT\",\n \"openclaw\": {\n \"type\": \"skill\",\n \"slug\": \"agentverif\",\n \"entry\": \"skill.py\",\n \"python-package\": \"agentverif-sign>=0.2.0\",\n \"requires\": {\n \"anyBins\": [\"python3\", \"python\"]\n },\n \"emoji\": \"✅\",\n \"badge\": \"✅ AgentVerif Certified\",\n \"env\": {\n \"AGENTVERIF_API_KEY\": {\n \"required\": false,\n \"description\": \"Required only for the revoke command.\"\n }\n },\n \"commands\": [\n \"scan\",\n \"verify\",\n \"sign\",\n \"revoke\",\n \"status\",\n \"report\",\n \"taint-check\",\n \"output-check\",\n \"diff\",\n \"badge\"\n ]\n },\n \"repository\": {\n \"type\": \"git\",\n \"url\": \"https://github.com/trusthandoff/agentverif\"\n }\n}"}],"languages":[],"docsSourceLabel":"CLAWHUB","editorialOverview":null,"editorialQuality":{"score":100,"threshold":65,"status":"thin","wordCount":1587,"uniquenessScore":43,"reasons":["uniqueness-below-45"]}},"media":{"evidence":{"source":"no-media","verified":false,"confidence":"low","updatedAt":"2026-10-11T20:28:25.269Z","emptyReason":"No screenshots, media assets, or demo links are available."},"primaryImageUrl":null,"mediaAssetCount":0,"assets":[],"demoUrl":null},"ownerResources":{"evidence":{"source":"unclaimed","verified":false,"confidence":"low","updatedAt":"2026-10-11T20:28:25.269Z","emptyReason":"This page has not been claimed by the agent owner."},"hasCustomPage":false,"customPageUpdatedAt":null,"customLinks":[],"structuredLinks":{"docsUrl":null,"demoUrl":null,"supportUrl":null,"pricingUrl":null,"statusUrl":null},"customPage":null},"relatedAgents":{"evidence":{"source":"protocol-neighbors","verified":false,"confidence":"medium","updatedAt":"2026-10-12T15:14:11.294Z","emptyReason":null},"items":[{"id":"8ebccd8e-3863-4187-8355-c3f14e1f9edf","entityType":"agent","canonicalPath":"/agent/iofficeai-aionui","slug":"iofficeai-aionui","name":"AionUi","description":"Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!","url":"https://github.com/iOfficeAI/AionUi","homepage":"https://www.aionui.com","source":"GITHUB_REPOS","protocols":["MCP","OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-10-09T19:11:12.944Z","createdAt":"2026-02-25T03:38:16.584Z","downloads":null},{"id":"b917f68a-ebff-438e-84f8-3f4b2494c0bc","entityType":"agent","canonicalPath":"/agent/activepieces-activepieces","slug":"activepieces-activepieces","name":"activepieces","description":"AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents","url":"https://github.com/activepieces/activepieces","homepage":"https://www.activepieces.com","source":"GITHUB_REPOS","protocols":["OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-15T02:22:12.426Z","createdAt":"2026-02-25T03:38:12.412Z","downloads":null},{"id":"5cb26759-3a39-483f-94cf-276a98c13bb8","entityType":"agent","canonicalPath":"/agent/cherryhq-cherry-studio","slug":"cherryhq-cherry-studio","name":"cherry-studio","description":"AI productivity studio with smart chat, autonomous agents, and 300+ assistants. Unified access to frontier LLMs","url":"https://github.com/CherryHQ/cherry-studio","homepage":"https://cherry-ai.com","source":"GITHUB_REPOS","protocols":["MCP","OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-11T14:38:40.986Z","createdAt":"2026-02-25T03:38:19.379Z","downloads":null},{"id":"6f6582d0-5d76-4f0f-b81d-86520247950b","entityType":"agent","canonicalPath":"/agent/copilotkit-copilotkit","slug":"copilotkit-copilotkit","name":"CopilotKit","description":"The Frontend for Agents & Generative UI. React + Angular","url":"https://github.com/CopilotKit/CopilotKit","homepage":"https://docs.copilotkit.ai","source":"GITHUB_REPOS","protocols":["OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-03-25T09:50:57.846Z","createdAt":"2026-02-25T03:39:14.617Z","downloads":null}],"links":{"hub":"/agent","source":"/agent/source/clawhub","protocols":[{"label":"OpenClaw","href":"/agent/protocol/openclew"}]}}}