← 返回 Skills 市场
thoughtproof

ThoughtProof

作者 ThoughtProof · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
261
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install thoughtproof
功能描述
Epistemic verification for AI agent outputs. Use ThoughtProof to verify AI reasoning, detect blind spots, and build consensus across multiple model families....
安全使用建议
This skill appears to be what it says (a wrapper that delegates to pot-cli to run multi-model verification), but the registry metadata omits critical requirements. Before installing or providing API keys: - Verify the pot-cli package: inspect its npm page and source repository (who maintains it, recent commits, issues). Do not blindly 'npm install -g' without review. - Audit pot-cli behavior: check where it stores keys (~/.potrc.json), whether it encrypts them, and whether it ever posts data to external endpoints (IPFS, remote servers). Run pot-cli in a sandbox or with network logging if unsure. - Use least-privilege keys: create limited-scope or rate-limited provider keys, or keys tied to billing limits. Consider dedicated accounts for verification tasks. - Inspect ~/.potrc.json permissions and consider using OS-level secrets managers rather than plaintext files. - Ask the registry maintainer (or the publisher) to correct the manifest so required binaries and config paths are declared. If you cannot confirm pot-cli's trustworthiness, do not install the skill or do so in an isolated environment. If you want, I can summarize the exact lines to look for in pot-cli's source (network calls, telemetry, config handling) or help draft questions to ask the package maintainer.
功能分析
Type: OpenClaw Skill Name: thoughtproof Version: 1.0.0 The ThoughtProof skill bundle is a transparent wrapper for an external utility (pot-cli) designed for multi-agent reasoning verification. The bash script (scripts/tp.sh) simply delegates commands to the CLI tool, and the documentation (SKILL.md and references/) provides clear, functional instructions for epistemic verification without any evidence of prompt injection, data exfiltration, or malicious intent.
能力评估
Purpose & Capability
The skill's stated purpose (multi-model epistemic verification) aligns with its instructions and the thin CLI wrapper. However, the registry metadata claims no required binaries, env vars, or config paths, while SKILL.md and scripts clearly require the external 'pot-cli' binary and provider API keys. This is an inconsistency between declared metadata and actual purpose/capability needs.
Instruction Scope
SKILL.md keeps scope to verification: normalize → generate → critique → synthesize and stores 'Epistemic Blocks' locally as JSON. The runtime instructions and the wrapper script only delegate to pot-cli and reference a local config (~/.potrc.json). There is no instruction to read unrelated system files or to transmit data to ThoughtProof servers (the README claims BYOK). Still, the docs reference Phase 3 IPFS and an external URL in the wrapper help; confirm those are optional and implemented only by pot-cli before trusting external storage.
Install Mechanism
The skill is instruction-only with a thin shell wrapper (tp.sh). It instructs users to install pot-cli via npm ('npm install -g pot-cli') but the skill manifest contains no install spec. This is not immediately dangerous, but it means installation pulls code from the npm ecosystem (pot-cli) which should be audited — the skill itself does not include or embed third-party binaries.
Credentials
ThoughtProof expects provider API keys (Anthropic, OpenAI, xAI, Moonshot) and a local config file (~/.potrc.json) to supply them, yet the registry metadata lists no required env vars or config paths. Requesting multiple unrelated provider keys is expected for 'model diversity', but the omission in the manifest prevents automated gating and misleads users about credential exposure. Users should be cautious about where and how keys are stored and whether pot-cli transmits them off-host.
Persistence & Privilege
The skill does not request always:true or other elevated persistence. It is user-invocable and not forced into all agent runs. The skill stores blocks locally (per SKILL.md) and the wrapper does not modify other skills or global agent configs.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install thoughtproof
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /thoughtproof 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release — epistemic verification for AI agent decisions. Multi-model consensus pipeline (Generate→Critique→Synthesize), MDI scoring, local block storage. BYOK.
元数据
Slug thoughtproof
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

ThoughtProof 是什么?

Epistemic verification for AI agent outputs. Use ThoughtProof to verify AI reasoning, detect blind spots, and build consensus across multiple model families.... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 261 次。

如何安装 ThoughtProof?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install thoughtproof」即可一键安装,无需额外配置。

ThoughtProof 是免费的吗?

是的,ThoughtProof 完全免费(开源免费),可自由下载、安装和使用。

ThoughtProof 支持哪些平台?

ThoughtProof 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 ThoughtProof?

由 ThoughtProof(@thoughtproof)开发并维护,当前版本 v1.0.0。

💬 留言讨论