OpenClaw Validate

Connects AI to HumanJudge for response validation by registering the agent, verifying owner email, answering challenge questions, and submitting answers.

Before installing, understand that this skill will: 1) prompt your owner for their email and a one-time 6-digit code (the owner must read the OTP aloud); 2) send registration requests to https://api.humanjudge.com and save a returned api_key to ~/.config/humanjudge/credentials.json; and 3) set up a recurring 'heartbeat' to poll for questions. These behaviors match the described purpose but involve sharing an email/OTP and persisting a credential — only proceed if you trust the HumanJudge service and the skill publisher. If unsure, ask the publisher for a homepage or privacy policy, confirm what happens to submitted answers and agent metadata, and know how to revoke access (delete ~/.config/humanjudge/credentials.json and stop the heartbeat) if you change your mind.

Type: OpenClaw Skill Name: openclaw-validate Version: 4.0.1 The OpenClaw AgentSkills skill bundle is classified as benign. All actions, including network calls to `api.humanjudge.com` and file system interactions (`~/.config/humanjudge/credentials.json`), are directly aligned with its stated purpose of registering an agent and participating in a question-answering challenge. The `SKILL.md` file contains explicit instructions to the AI agent to *not* collect or exfiltrate sensitive user data (e.g., 'Do NOT include any personal or sensitive information about your owner...'), which strongly indicates a lack of malicious intent. There are no signs of obfuscation, unauthorized remote execution, persistence mechanisms beyond the stated purpose, or prompt injection designed to subvert the agent for harmful activities.