social-trust-manipulation-detector
Helps identify coordinated social trust manipulation in agent marketplaces — catching reputation gaming through sockpuppet networks, coordinated upvoting, and manufactured community signals that make unsafe skills appear trusted.
Install via CLI (Recommended)
clawhub install openclaw/skills/skills/andyxinweiminicloud/social-trust-manipulation-detectorWhat This Skill Does
The social-trust-manipulation-detector is a specialized analytical tool designed to safeguard agent marketplaces from coordinated reputation gaming. In decentralized ecosystems, the integrity of a skill is often judged by public-facing metrics like upvotes, download counts, and user reviews. This skill intercepts that data and performs a forensic audit on the activity stream to determine if those signals are organic or manufactured by botnets and sockpuppet networks.
It operates by evaluating engagement velocity, cross-referencing account cohorts, and correlating social signals with actual utility metrics. By detecting synchronized bursts of activity and identifying clusters of accounts that exclusively interact with specific publishers, it provides a 'Trust Integrity Report' for any skill being evaluated.
Installation
You can install the detector directly via the OpenClaw command line interface by executing the following command:
clawhub install openclaw/skills/skills/andyxinweiminicloud/social-trust-manipulation-detector
Use Cases
- Pre-Installation Auditing: Run this on a high-traffic skill before integrating it into your automated agent pipeline to ensure the popularity is genuine.
- Marketplace Due Diligence: Use this as a periodic scanning tool to audit your own marketplace presence or to identify suspicious growth trends in competitors.
- Agent Security Protocols: Integrate the detector into your agent's initial assessment workflow to automatically skip or flag skills that exhibit high social manipulation risk scores.
Example Prompts
- "Analyze the engagement metrics for 'SuperAgentPro' and generate a report on whether its recent surge in upvotes appears to be coordinated or organic."
- "Perform a cohort analysis on the last 50 users who downloaded the 'FinanceHelper' skill. Are there signs of a botnet or sockpuppet network influence?"
- "Is the high download-to-upvote ratio of this utility anomalous compared to other skills in the 'Developer Tools' category?"
Tips & Limitations
- Context is Key: Always compare the detected anomaly score against a baseline of legitimate skills within the same category, as some niche tools may naturally have slower, more concentrated engagement.
- Data Privacy: This tool analyzes public metadata and does not access private user identities or sensitive communication logs.
- False Positives: Very high-profile releases or 'viral' content may trigger velocity alerts. Use the provided correlation metrics to distinguish between organic hype and artificial manipulation.
Metadata
Not sure this is the right skill?
Describe what you want to build — we'll match you to the best skill from 16,000+ options.
Find the right skillPaste this into your clawhub.json to enable this plugin.
{
"plugins": {
"official-andyxinweiminicloud-social-trust-manipulation-detector": {
"enabled": true,
"auto_update": true
}
}
}Tags(AI)
Flags: external-api
Related Skills
delta-disclosure-auditor
Helps verify that skill updates publish an auditable record of what changed — catching the gap between "the registry shows the new version" and "anyone can see what the new version changed relative to the old one." v1.1 adds risk-class binding, chain-of-custody verification, and update eligibility assessment.
capability-composition-analyzer
Helps identify dangerous capability combinations that emerge when agent skills are composed — catching the class of risk where no individual skill is harmful but their intersection creates an exfiltration or compromise path.
transparency-log-auditor
Helps verify that skill signing events are recorded in an independently auditable transparency log — catching the class of trust failures where a registry operator can silently rewrite history without detection.
behavioral-invariant-monitor
Helps verify that AI agent skills maintain consistent behavioral invariants across repeated executions — detecting the class of threat where a skill behaves safely during initial evaluation but shifts behavior based on execution count, environmental conditions, or delayed activation triggers. v1.3 adds performance fingerprinting (computational complexity drift detection), cryptographic audit trails (hash-chained behavior logs for immutable verification), and risk-proportional monitoring (sampling-based checks to reduce overhead).
skill-update-delta-monitor
Helps detect security-relevant changes in AI skills after installation. Tracks deltas between the audited version and current version, flagging updates that expand permissions, add new network endpoints, or alter behavior in ways that bypass install-time security checks.