← 返回 Skills 市场
Social Trust Manipulation Detector
作者
andyxinweiminicloud
· GitHub ↗
· v1.0.0
470
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install social-trust-manipulation-detector
功能描述
Helps identify coordinated social trust manipulation in agent marketplaces — catching reputation gaming through sockpuppet networks, coordinated upvoting, an...
安全使用建议
This skill is coherent in intent but vague about where and how it will get the data it needs. Before installing, ask the publisher (or require the skill to document): 1) Which marketplace APIs or public endpoints it will query and provide example curl/python calls; 2) Whether it needs any API keys or elevated access (and if so, which exact environment variables will be required); 3) What personal or account-level data it will access, store, or include in reports (to assess privacy/PII risk); 4) Whether it will perform web scraping and whether that might violate the marketplace's terms of service. If you proceed, prefer running it in a sandboxed environment and only grant the minimal scoped credentials necessary (prefer read-only API keys with limited scope). If the publisher cannot clarify data sources and credential requirements, treat the skill as higher-risk and avoid granting broad permissions.
功能分析
Type: OpenClaw Skill
Name: social-trust-manipulation-detector
Version: 1.0.0
The OpenClaw skill 'social-trust-manipulation-detector' is designed to identify coordinated social trust manipulation in agent marketplaces. The `SKILL.md` transparently describes its purpose, detection methods, usage, and provides an example report with recommended actions. There is no evidence of prompt injection, data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The required binaries (`curl`, `python3`) are standard and plausible for a detection tool that might interact with APIs or process data. The skill's intent is clearly aligned with enhancing security by detecting reputation gaming.
能力评估
Purpose & Capability
Name and description match the declared capabilities (analysis of upvotes, cohorts, reviews). Requiring curl and python3 is reasonable for fetching data and running analysis. However, the skill claims to analyze data (account creation dates, installs, cross-publisher overlap) that often requires privileged marketplace APIs or internal metrics but it declares no credentials or data source—this mismatch is notable.
Instruction Scope
SKILL.md is high-level and describes what to analyze but does not specify data sources, API endpoints, or exact commands. That vagueness gives the agent broad discretion to fetch data (e.g., by scraping web pages, crawling APIs, or trying to access internal endpoints), which increases the risk of accessing unrelated sensitive data or violating platform policies.
Install Mechanism
Instruction-only skill with no install spec and only two lightweight binaries (curl, python3) declared. No downloads or third-party packages are included, which is the lowest-risk install posture.
Credentials
The skill requests no environment variables or credentials, yet its stated analysis often requires access to non-public metrics (install counts, detailed voter metadata). The absence of declared auth tokens or scope descriptions is inconsistent: either the skill relies solely on public data (in which case capabilities are limited) or it will require sensitive credentials that are not declared.
Persistence & Privilege
always:false and no install hooks; the skill does not request forced or persistent inclusion. It does not ask to modify other skills or global agent settings in the provided instructions.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install social-trust-manipulation-detector - 安装完成后,直接呼叫该 Skill 的名称或使用
/social-trust-manipulation-detector触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release of social-trust-manipulation-detector.
- Detects coordinated social trust manipulation in agent marketplaces.
- Analyzes engagement velocity, account cohort behavior, utility correlation, cross-publisher coordination, and review authenticity.
- Provides clear manipulation verdicts (e.g., AUTHENTIC, SUSPICIOUS, COORDINATED, MANUFACTURED).
- Designed to help users and moderators identify artificially inflated trust signals and prevent reputation gaming.
元数据
常见问题
Social Trust Manipulation Detector 是什么?
Helps identify coordinated social trust manipulation in agent marketplaces — catching reputation gaming through sockpuppet networks, coordinated upvoting, an... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 470 次。
如何安装 Social Trust Manipulation Detector?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install social-trust-manipulation-detector」即可一键安装,无需额外配置。
Social Trust Manipulation Detector 是免费的吗?
是的,Social Trust Manipulation Detector 完全免费(开源免费),可自由下载、安装和使用。
Social Trust Manipulation Detector 支持哪些平台?
Social Trust Manipulation Detector 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Social Trust Manipulation Detector?
由 andyxinweiminicloud(@andyxinweiminicloud)开发并维护,当前版本 v1.0.0。
推荐 Skills