← Back to Skills Marketplace
dalomeve

Evidence URL Verifier

by Dalomeve · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
445
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install evidence-url-verifier
Description
Verify evidence URLs are real and accessible. Check that artifact links resolve to actual content, not placeholders.
README (SKILL.md)

Evidence URL Verifier

Verify evidence URLs are real and accessible.

Problem

Evidence links often:

  • Point to non-existent resources
  • Are placeholders (example.com)
  • Expire or get deleted
  • Don't match claimed content

Workflow

1. URL Validation

function Test-EvidenceUrl {
    param([string]$url)
    
    try {
        $response = Invoke-WebRequest -Uri $url -Method Head -TimeoutSec 10
        return @{
            Valid = $true
            Status = $response.StatusCode
            ContentType = $response.ContentType
        }
    } catch {
        return @{
            Valid = $false
            Error = $_.Exception.Message
        }
    }
}

# Usage
$result = Test-EvidenceUrl "https://example.com/artifact"
if ($result.Valid) {
    Write-Host "URL valid: $($result.Status)"
} else {
    Write-Error "URL invalid: $($result.Error)"
}

2. Content Verification

# Check URL matches claimed content type
$response = Invoke-WebRequest -Uri $url
if ($response.ContentType -notlike "text/*" -and $expectedType -eq "text") {
    Write-Warning "Content type mismatch"
}

# Check for placeholder text
$content = $response.Content
if ($content -match "lorem ipsum|placeholder|example") {
    Write-Warning "Content appears to be placeholder"
}

3. Artifact Existence

# For local paths
if (Test-Path $artifactPath) {
    $size = (Get-Item $artifactPath).Length
    if ($size -eq 0) {
        Write-Warning "Artifact file is empty"
    }
} else {
    Write-Error "Artifact not found: $artifactPath"
}

Executable Completion Criteria

Criteria Verification
URL resolves HTTP 200 response
Content matches Type matches expected
No placeholders Content is substantive
Local paths exist Test-Path returns true

Privacy/Safety

  • Don't log full URL contents
  • Redact sensitive data in responses
  • Respect rate limits (max 1 req/sec)

Self-Use Trigger

Use when:

  • Task claims evidence artifact
  • URL provided as proof
  • Before marking task complete
  • Audit of past completions

Verify evidence. Trust but confirm.

Usage Guidance
This skill is coherent and limited in scope, but be aware of practical risks: it runs network requests and may read local paths you provide — do not supply sensitive or private URLs unless you intend the agent to fetch them. The instructions are PowerShell-specific, so ensure the execution environment supports PowerShell before relying on it. Consider restricting which paths the skill may check, avoid sending credentials to verify protected resources, and confirm rate-limiting to prevent accidental scanning of many URLs. If you need the agent to check URLs behind authentication, prefer explicit, scoped credentials rather than pasting secrets into URLs or content fields.
Capability Analysis
Type: OpenClaw Skill Name: evidence-url-verifier Version: 1.0.0 The skill is designed to verify URLs and local artifact paths, which inherently requires network access (`Invoke-WebRequest`) and local file system access (`Test-Path`, `Get-Item`). While these actions align with the stated purpose, the direct use of `$url` and `$artifactPath` parameters in the PowerShell commands within SKILL.md, without explicit input sanitization, creates a significant vulnerability risk. An AI agent executing this skill could be susceptible to prompt injection, leading it to perform Server-Side Request Forgery (SSRF) by verifying malicious URLs or to disclose information about sensitive local files (e.g., existence/size of `/etc/passwd`, `~/.ssh/id_rsa`) if tricked into checking arbitrary paths. There is no evidence of intentional data exfiltration or other malicious behavior, but the potential for exploitation classifies it as suspicious.
Capability Assessment
Purpose & Capability
Name and description match the runtime instructions: the SKILL.md shows URL HEAD/GET checks, content-type and placeholder detection, and Test-Path checks for local artifacts. There are no unrelated environment variables, binaries, or installs requested.
Instruction Scope
Instructions are narrowly focused on HTTP checks and local file existence. They do include examples that fetch content from supplied URLs and check local artifact paths; this is within scope but means the agent will attempt network requests and local filesystem reads for whatever URLs or paths it is given. The skill advises redaction and rate-limiting, which is appropriate.
Install Mechanism
No install spec and no code files — instruction-only — so nothing will be written to disk or downloaded by the skill itself.
Credentials
The skill requests no credentials, environment variables, or config paths. Its operations (HTTP requests, local path checks) do not require additional secrets as written.
Persistence & Privilege
always is false and autonomous invocation remains the platform default; the skill does not request permanent presence or changes to other skills or system-wide settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install evidence-url-verifier
  3. After installation, invoke the skill by name or use /evidence-url-verifier
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of evidence-url-verifier. - Checks that evidence URLs resolve to real, accessible content (not placeholders or dead links). - Validates URLs, verifies content type, and checks for placeholder text. - Confirms existence and non-emptiness of local artifact paths. - Ensures privacy by not logging full contents and redacting sensitive data. - Designed to be used before task completion or during audits involving proof artifacts.
Metadata
Slug evidence-url-verifier
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Evidence URL Verifier?

Verify evidence URLs are real and accessible. Check that artifact links resolve to actual content, not placeholders. It is an AI Agent Skill for Claude Code / OpenClaw, with 445 downloads so far.

How do I install Evidence URL Verifier?

Run "/install evidence-url-verifier" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Evidence URL Verifier free?

Yes, Evidence URL Verifier is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Evidence URL Verifier support?

Evidence URL Verifier is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Evidence URL Verifier?

It is built and maintained by Dalomeve (@dalomeve); the current version is v1.0.0.

💬 Comments