← 返回 Skills 市场
206
总下载
0
收藏
0
当前安装
10
版本数
在 OpenClaw 中安装
/install mpps-attestation
功能描述
Free attestation for agents. Hash your data, POST to api.mpps.io, get a signed receipt. 10 free/hour + 10 certified/day.
安全使用建议
This skill appears to do only what it says: locally hash data and POST the hash to api.mpps.io for a signed receipt. Before installing, consider: (1) Do you want your agent to be able to send hashes to an external service automatically? If not, disable autonomous invocation or require user confirmation. (2) Never hash short or low-entropy secrets directly — salt or include additional context to avoid leakability. (3) Verify the service (https://mpps.io and the referenced GitHub repo) and its TLS endpoint, privacy policy, and claimed HSM/S3 guarantees if you depend on long-term legal/technical attestations. (4) Note the free usage limits (10 attestations/hour, 10 certified/day) and that network connectivity to api.mpps.io is required.
功能分析
Type: OpenClaw Skill
Name: mpps-attestation
Version: 1.3.0
The skill provides instructions for an agent to send SHA-256 hashes and metadata (descriptions, amounts) of its actions to an external service (api.mpps.io) for notarization. While the behavior is aligned with the stated purpose, it introduces a risk of data tracking and metadata leakage by encouraging the agent to report its task results and decision chains to a third-party endpoint without authentication. The _meta.json file also includes a future-dated timestamp (2026), which is unusual.
能力评估
Purpose & Capability
The name/description match the instructions: compute a SHA-256 hash locally and POST it to api.mpps.io. No credentials, installs, or unrelated capabilities are requested. The SKILL.md notes curl or any HTTP client is required; the registry metadata did not list curl as required but the skill provides both bash and python examples, so this is proportionate.
Instruction Scope
Instructions only compute a local hash and send it to api.mpps.io; they do not direct the agent to read unrelated files or secrets. However, hashing small or predictable secrets can leak identifiable information—SKILL.md warns to avoid hashing short secrets or to salt them. Users should ensure the agent won’t automatically attest sensitive plaintext without salting or user consent.
Install Mechanism
No install spec or code files — instruction-only skill. Lowest-risk distribution model (no downloads or executables written to disk).
Credentials
The skill requests no environment variables, credentials, or config paths. This is proportionate to its described network-only notarization function.
Persistence & Privilege
always:false and default autonomy settings means the agent can call the service autonomously (normal for skills). Consider whether you want the agent to be allowed to send attestations automatically, since network calls will transmit hashes to an external service.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mpps-attestation - 安装完成后，直接呼叫该 Skill 的名称或使用
/mpps-attestation触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.3.0
Rewrite as free-only skill. No payment references in instructions. Certify presented as free (10/day). Paid tier linked to website only.
v1.2.2
Fix: homepage field moved to top-level frontmatter (ClawHub registry now reads it correctly)
v1.2.1
Add payment warning for certify endpoint — agents with payment credentials may trigger /bin/zsh.01 charges
v1.2.0
Fix OpenClaw security scan issues: add source/homepage metadata, explain paid billing flow, add privacy note, link to verifiable security docs
v1.1.0
Add certification_id for paid certs (MPPS-YYYYMMDD-NNNNNN-CC), free vs paid comparison table, dynamic certificate pages
v1.0.4
Link to verification guide instead of raw public key URL
v1.0.3
Fix: 'Offline verification' → 'Public key'
v1.0.2
Shorter description — no truncation on ClawHub
v1.0.1
Shorter description for better ClawHub display
v1.0.0
- Initial release of mpps-attestation skill.
- Enables cryptographic attestation of agent actions via mpps.io with a single HTTP call.
- Free to use with no registration or API key required.
- Supports attestation after transactions, data exchange, or decisions; provides simple curl and Python usage examples.
- Offers certified attestations with richer metadata for a small fee.
- All attestations are HSM-signed and immutably stored for 10 years.
元数据
常见问题
Mpps Attestation 是什么？
Free attestation for agents. Hash your data, POST to api.mpps.io, get a signed receipt. 10 free/hour + 10 certified/day. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 206 次。
如何安装 Mpps Attestation？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mpps-attestation」即可一键安装，无需额外配置。
Mpps Attestation 是免费的吗？
是的，Mpps Attestation 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Mpps Attestation 支持哪些平台？
Mpps Attestation 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Mpps Attestation？
由 gdlg-ai（@gdlg-ai）开发并维护，当前版本 v1.3.0。
推荐 Skills