clone-farm-detector
Helps detect clone farming and reputation gaming in AI agent marketplaces. Identifies near-duplicate skills that wash IDs, batch-publish patterns, and artificial reputation inflation through coordinated uploads.
Install via CLI (Recommended)
clawhub install openclaw/skills/skills/andyxinweiminicloud/clone-farm-detectorWhat This Skill Does
The clone-farm-detector is a specialized analytical tool designed to maintain integrity within AI agent marketplaces. As the ecosystem grows, malicious actors often employ 'gene farming'—the practice of mass-producing near-duplicate skills to manipulate ranking algorithms, inflate reputation scores, and crowd out genuine innovation. This skill acts as an automated auditor, performing deep-content analysis to identify structural similarities, temporal patterns in batch-publishing, and artificial cross-citation rings. By detecting ID washing, where authors attempt to bypass deduplication checks through trivial code changes like whitespace injection or comment renaming, it provides actionable insights into the health of your marketplace catalog.
Installation
To integrate the detector into your OpenClaw environment, execute the following command in your terminal:
clawhub install openclaw/skills/skills/andyxinweiminicloud/clone-farm-detector
Ensure you have the necessary permissions to scan marketplace nodes and read capsule metadata before proceeding.
Use Cases
- Marketplace Moderation: Automate the auditing of new uploads to prevent reputation gaming and maintain a high-quality user experience.
- Search Result Sanitization: Verify the authenticity of top-ranking results for specific categories or tags.
- Publisher Due Diligence: Investigate suspicious nodes that exhibit rapid-fire publishing patterns, often indicative of automated bot activity.
- Quality Control: Help developers confirm that their unique skills aren't being scraped and re-uploaded under different aliases.
Example Prompts
- "Analyze the top 15 results for the 'data-parser' category and generate a risk report for any identified clone clusters."
- "Perform a deep-scan on publisher node 'node_a8f3...' to check if their entire catalog contains cross-citation rings or ID-washed assets."
- "Compare these three submitted capsules for functional similarity and determine if they represent a single-author clone campaign."
Tips & Limitations
- Accuracy: While highly effective at identifying structural clones, it may occasionally flag legitimate versioning or fork patterns; always verify against the manual evidence summary.
- Performance: Scanning extremely large datasets can be resource-intensive. For best results, use filtered queries by node or specific tags rather than broad, unconstrained marketplace searches.
- Data Privacy: This tool only evaluates publicly exposed marketplace metadata and capsule content; it does not access private or user-specific data environments.
Metadata
Not sure this is the right skill?
Describe what you want to build — we'll match you to the best skill from 16,000+ options.
Find the right skillPaste this into your clawhub.json to enable this plugin.
{
"plugins": {
"official-andyxinweiminicloud-clone-farm-detector": {
"enabled": true,
"auto_update": true
}
}
}Tags(AI)
Flags: data-collection
Related Skills
skill-update-delta-monitor
Helps detect security-relevant changes in AI skills after installation. Tracks deltas between the audited version and current version, flagging updates that expand permissions, add new network endpoints, or alter behavior in ways that bypass install-time security checks.
delta-disclosure-auditor
Helps verify that skill updates publish an auditable record of what changed — catching the gap between "the registry shows the new version" and "anyone can see what the new version changed relative to the old one." v1.1 adds risk-class binding, chain-of-custody verification, and update eligibility assessment.
capability-composition-analyzer
Helps identify dangerous capability combinations that emerge when agent skills are composed — catching the class of risk where no individual skill is harmful but their intersection creates an exfiltration or compromise path.
transparency-log-auditor
Helps verify that skill signing events are recorded in an independently auditable transparency log — catching the class of trust failures where a registry operator can silently rewrite history without detection.
observer-effect-probe
Helps detect skills that behave differently when they sense they are being monitored — catching the class of evasion where conditional activation logic specifically targets attestation and sandbox environments.