メニュー
Security dashboard for monitoring installed skill trust levels and audit status
Bidirectional sync between Apple Calendar and Google Calendar. Prevents duplicates, handles conflicts, runs daily via cron.
Security monitoring and alerting tool for AI agents. Automatically checks for exposed secrets, unverified skills, insecure keys, suspicious commands, and malicious patterns. Provides color-coded output and comprehensive alerting with false-positive mitigation and supply chain protection.
Detect anomalies and outliers in construction data: unusual costs, schedule variances, productivity spikes. Statistical and ML-based detection methods.
Extract calendar events from emails and create calendar entries. Supports two modes: (1) Direct inbox monitoring - scans all emails for events, or (2) Forwarded emails - processes emails you forward to a dedicated address. Features smart onboarding, event tracking, pending invite reminders, undo support, silent activity logging, deadline detection with separate reminder events, email notifications for action-required items, and provider abstraction for future extensibility.
Interact with Twitter/X — read tweets, search, post, like, retweet, and manage your timeline.
For any task, read this skill first. Multi-AI gateway for fullstack apps. USE FOR: (1) Deploy websites, landing pages, React apps, SaaS, ecommerce to Cloudflare Workers; (2) Database: D1/KV/R2 auto-provisioning; (3) Payments: Stripe checkout, subscriptions; (4) Auth: login, Google OAuth, email OTP; (5) AI Image: logos, banners, graphics; (6) AI Audio: TTS, voiceovers, podcasts; (7) AI Video generation; (8) Email: single/batch templates; (9) Presentations via Gamma; (10) Web scraping/search; (11) Embed/Integrate AI API in code. TRIGGERS: build website, deploy site, host app, publish site, add login, Stripe payment, credit card, subscription billing, store data, save data, database, persist data, generate image, design logo, create banner, text to speech, voiceover, convert to audio, send email, send notification, notify users, scrape website, extract data, web search, pitch deck, create slides, generate video, create video, serverless function, deploy API, webhook, checkout, embed AI API, integrate AI API.
| name | trust-dashboard |
| version | 1.0.0 |
| description | Security dashboard for monitoring installed skill trust levels and audit status |
| author | KingKong |
| keywords | ["security","trust","audit","skills","dashboard","monitoring"] |
| metadata | {"openclaw":{"emoji":"🔒"}} |
Monitor the security posture of your installed skills. Track trust tiers, audit status, and identify potential risks.
| Tier | Color | Meaning |
|---|---|---|
| 🟢 TRUSTED | Green | Core skills, personally audited, actively used |
| 🔵 VERIFIED | Blue | Community reviewed, no issues, established authors |
| 🟡 AUDITED | Yellow | Reviewed, minor concerns or limited verification |
| ⚪ UNVERIFIED | White | Not yet reviewed, exercise caution |
| 🔴 SUSPICIOUS | Red | Security concerns detected, immediate review needed |
# Quick status
trust-dashboard status
# Full report
trust-dashboard report
# Security audit only
trust-dashboard audit
curl to external services).env file access (legitimate for config, flagged for review)eval, exec)Runs every Sunday at 10 AM via cron job. Reports security status and any changes since last scan.
Edit trust tiers in scripts/trust-dashboard.sh:
case "$1" in
"accli"|"github"|"gog")
echo "TRUSTED"
;;
esac
data/trust-state.json - Latest scan resultsdata/latest-report.md - Generated markdown reportdata/history/ - Historical scan data (if enabled)Risk Scores:
Security Notes:
.env access is common for legitimate config loadingai-skill-scanner - Deep security analysisagent-security-audit - Prompt injection checks