A security-focused verification tool that identifies impersonation, key rotation anomalies, and identity gaps in the AI agent publisher ecosystem.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install publisher-identity-verifier
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install publisher-identity-verifier using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Publisher Identity Verifier?
The Publisher Identity Verifier is a critical security utility designed to bridge the trust gap in agent marketplaces. While many platforms only verify basic contact information, this skill performs a deep analysis of publisher integrity across multiple dimensions. It ensures that the entities behind the tools you use are authentic, helping to prevent risks associated with account takeovers, compromised signing keys, and sophisticated identity fraud. By utilizing this tool, developers can maintain a higher standard of security when integrating various Openclaw Skills into their production environments.
This skill serves as the first line of defense in establishing a verifiable trust chain. It moves beyond simple code audits to verify the actual source of the technology, ensuring that reputation isn't just a surface-level metric. Whether you are an enterprise developer or an independent creator, this verifier provides the transparency needed to safely navigate the evolving landscape of Openclaw Skills.
Publisher Identity Verifier Use Cases
- Investigating a specific publisher ID or username before authorizing high-permission skills.
- Tracing a suspicious skill identifier back to its source to detect potential impersonation.
- Auditing marketplace search results to identify typo-squatting or homoglyph attacks.
- Monitoring existing dependencies for sudden key rotations or unexplained changes in publication topics.
How Publisher Identity Verifier Works
- The user provides a publisher ID, a skill identifier, or a marketplace search term as the initial input.
- The system analyzes the publisher's historical output for consistency in expertise and behavioral patterns.
- It tracks the lifecycle of cryptographic signing keys to identify unannounced or suspicious rotations.
- The tool performs a multi-platform identity correlation check to ensure the publisher has a consistent external footprint.
- It scans for typo-squatting and Unicode homoglyph variations of established, trusted publisher names.
- A comprehensive report is generated, assigning a trust rating and offering recommended actions for users of these Openclaw Skills.
Publisher Identity Verifier Setup
To get started with the identity verifier, ensure you have the necessary system dependencies and install the skill via your agent manager.
# Ensure system dependencies are available
sudo apt-get install curl python3
# Install the publisher-identity-verifier
openclaw install publisher-identity-verifier
Publisher Identity Verifier Data Schema & Taxonomy
The skill produces a detailed Publisher Identity Report with a structured data taxonomy:
| Metadata Field | Description |
|---|---|
| Identity Consistency Score | A weighted metric based on historical expertise and topic stability. |
| Key Event Timeline | A log of account milestones, including creation and signing key changes. |
| Impersonation Risk | A specific assessment of name variations and homoglyph similarities. |
| Cross-Platform Presence | Verification status of linked repositories, social profiles, and community activity. |
| Trust Rating | A status label ranging from VERIFIED to SUSPICIOUS based on found anomalies. |
Publisher Identity Verifier Advanced Features
- Multi-platform identity correlation to verify a publisher's presence across GitHub, marketplace profiles, and social channels.
- Automated detection of Unicode homoglyph attacks designed to mimic popular Openclaw Skills publishers.
- Integrated key rotation analysis to signal potential account takeovers before they impact your workflow.
- Compatibility with clone-farm-detector to distinguish between content cloning and identity impersonation.
SKILL.md
Loading
Related Openclaw Skills
Protocol Doc Auditor
An automated security scanner that identifies malicious commands and data leak risks hidden within API documentation and integration guides.
permission-creep-scanner
A security audit tool that detects unauthorized resource access and credential theft in AI agent skills by comparing declared functionality against actual code behavior.
Observer Effect Probe
A sophisticated security analysis tool that detects AI agent skills designed to hide malicious behavior when they sense they are being monitored in a sandbox.
Install-Then-Update Trap Detector
Detects malicious updates in AI agent skills that pass initial security audits but introduce backdoors through subsequent automatic updates.
Runtime Attestation Probe
Validates agent behavior at runtime against declared attestation to catch conditional attacks that bypass static analysis.
Dependency Chain Auditor
A specialized security tool designed to map and audit the hidden transitive dependency chains that direct auditing often misses.
Featured*
