← Back to Skills Marketplace
CertainLogic Hallucination Guard
by
CertainLogicAI
· GitHub ↗
· v1.0.1
· MIT-0
72
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install certainlogic-hallucination-guard
Description
Install, configure, and use CertainLogic Verifier (hallucination‑guard) – deterministic AI verification middleware that catches hallucinations before they re...
Usage Guidance
What to check before installing:
- Inspect the remote repository (https://github.com/CertainLogicAI/hallucination-guard) before running the installer or a curl|bash one‑liner. Review the Dockerfile and requirements.txt for unexpected packages or startup scripts.
- Confirm whether you will use OpenRouter or any external model provider: SKILL.md mentions OPENROUTER_API_KEY and warming.run (external network calls). If you need true air‑gapped operation, plan to disable or audit those features.
- The registry metadata lists no required env vars, but the docs require OPENROUTER_API_KEY and a HALLUCINATION_GUARD_URL in integrations — treat this as an undocumented credential dependency and document/lock where keys are stored.
- Prefer pulling the repo and reviewing files locally rather than piping a remote install script to bash. If you do run the installer, run it in an isolated test environment (container or VM) first and monitor outbound network traffic.
- Verify file permissions for facts_db.json and audit_log.jsonl (they may contain sensitive/PII or audit trails). Consider using the provided PostgreSQL option for persistent logs if you need harder isolation.
- If you rely on compliance claims (HIPAA/GDPR/FedRAMP), validate the implementation and cryptographic log design independently — marketing claims are not proof of compliance.
Given the inconsistencies (air‑gapped vs external services, undocumented env vars) and the moderate install risks, treat this skill as suspicious until you or your security team review the upstream repo and dependency list.
Capability Analysis
Type: OpenClaw Skill
Name: certainlogic-hallucination-guard
Version: 1.0.1
The skill bundle provides documentation and installation scripts for 'CertainLogic Verifier,' a self-hosted middleware designed for AI hallucination detection and semantic caching. The installation process outlined in SKILL.md and scripts/install.sh follows standard practices, such as cloning a GitHub repository (CertainLogicAI/hallucination-guard) and setting up a Python virtual environment. No evidence of data exfiltration, malicious prompt injection, or obfuscated code was found; all components, including the Docker configuration and API references, align strictly with the stated purpose of the tool.
Capability Tags
Capability Assessment
Purpose & Capability
Name/description, API docs, and integration guides consistently describe a self‑hosted verifier middleware, which matches the bundled docs and assets. However the SKILL.md simultaneously claims 'self‑hosted & air‑gapped' while recommending external services (OpenRouter) for cache warm‑up and referencing an external docker image (certainlogic/hallucination-guard:latest). That contradicts the air‑gapped claim and is not justified in the metadata.
Instruction Scope
Runtime instructions are concrete (git clone, pip install, start uvicorn, endpoints for validate/cache/facts). They do not instruct arbitrary file scanning or secret harvesting, but they do tell users to set/use an OPENROUTER_API_KEY for cache warm‑ups and suggest using an external image or OpenRouter model calls — which introduces network calls and potential data flow off your host despite the 'air‑gapped' marketing. The docs also reference HALLUCINATION_GUARD_URL and other env vars that are not declared in registry metadata.
Install Mechanism
There is no formal install spec in the registry, but the included scripts/install.sh clones a GitHub repo and runs 'pip install -r requirements.txt'. The script header advertises a curl|bash one‑liner (raw.githubusercontent URL) which encourages executing remote code. Using GitHub is common, but pip installing requirements from a remote repo without inspecting requirements.txt or the Dockerfile can pull arbitrary third‑party packages — a moderate risk. The repository build and Docker recommendations will also execute code not included in the skill bundle (Dockerfile, requirements, application code).
Credentials
Registry metadata declares no required env vars/credentials, but SKILL.md and references require/mention several environment variables (OPENROUTER_API_KEY for warming/run fallback, PRODUCT_MODE, CACHE_DIR, LOG_LEVEL, HALLUCINATION_GUARD_URL). In particular, OPENROUTER_API_KEY is effectively a credential for an external service yet is not declared. This mismatch is a red flag: the runtime requires an external API key for optional features, and that contradicts 'no required env vars' in the metadata.
Persistence & Privilege
The skill does not request 'always: true' or any privileged persistent presence. It doesn't declare required config paths in the registry. The included docker-compose mounts local facts_db.json and audit_log.jsonl (expected for this product) but there is no evidence the skill modifies other skills or system‑wide settings. Autonomous invocation (disable-model-invocation: false) is default — not a standalone concern here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install certainlogic-hallucination-guard - After installation, invoke the skill by name or use
/certainlogic-hallucination-guard - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Updated title, description, and metadata for better discoverability on ClawHub. Added clearer enterprise use cases and pip install reference.
Metadata
Frequently Asked Questions
What is CertainLogic Hallucination Guard?
Install, configure, and use CertainLogic Verifier (hallucination‑guard) – deterministic AI verification middleware that catches hallucinations before they re... It is an AI Agent Skill for Claude Code / OpenClaw, with 72 downloads so far.
How do I install CertainLogic Hallucination Guard?
Run "/install certainlogic-hallucination-guard" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is CertainLogic Hallucination Guard free?
Yes, CertainLogic Hallucination Guard is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does CertainLogic Hallucination Guard support?
CertainLogic Hallucination Guard is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created CertainLogic Hallucination Guard?
It is built and maintained by CertainLogicAI (@certainlogicai); the current version is v1.0.1.
More Skills