Opus 4.6 Quality Certification

Opus 4.6 Quality Certification program for ClawHub skills. Verify, audit, and certify skills for quality, security, and performance.

Key issues to consider before installing or trusting this skill: - Mismatched CLI: SKILL.md and docs show a '/opus-certification' CLI, but package.json and the files do not install such a binary (no 'bin' field). Confirm how the CLI is supposed to be installed and whether the skill will actually provide the described commands. - Unexplained 'clawhub' requirement: The metadata lists 'clawhub' as a required binary, but index.js never calls it. Ask the author why this is required; do not grant extra system access for it until clarified. - Simulated/random audit results: The audit and self-assessment functions use randomization to simulate pass/fail outcomes. This makes the tool unreliable for real certification decisions and could produce misleading outputs. Do not treat its outputs as authoritative without swapping out the simulation for deterministic checks. - Identity and source: The package lists 'ClawHub' as author and a ClawHub email/URLs are referenced, but the registry metadata shows an unknown owner ID and no homepage. Verify the publisher/maintainer identity (official ClawHub source) before trusting badges, contacting emails, or relying on the tool for formal certification. - Safe testing steps: Run the code in a sandbox or isolated environment first, inspect index.js (already done) and confirm no network exfiltration. If you want a proper CLI, ask the maintainer to add a 'bin' entry and provide an install script or publish on a trusted registry. What would change this assessment: a clear install spec that creates the advertised '/opus-certification' binary (or updated SKILL.md aligned with 'node index.js'), removal/justification of the 'clawhub' binary requirement, deterministic/real audit checks (not simulated randomness), and verifiable author/publisher metadata (official ClawHub account or homepage).

Type: OpenClaw Skill Name: opus-certification Version: 1.0.0 The skill claims to be a security and quality auditing tool ('Opus 4.6 Quality Certification'), but its implementation in index.js is entirely deceptive, using Math.random() to simulate audit results rather than performing any actual analysis. Furthermore, index.js imports child_process.execSync without using it, and SKILL.md lists several commands (e.g., security-scan, benchmark) that are not implemented in the code. This discrepancy between the stated purpose and the actual logic, combined with unused high-risk imports, suggests a deceptive or placeholder nature.