trust-velocity-calculator
Helps calculate the rate at which trust in a skill or agent is decaying by combining time elapsed since last verification with the rate of change in behavior, permissions, or dependencies — producing a trust velocity score that predicts when a trusted credential will become unreliable.
Install via CLI (Recommended)
clawhub install openclaw/skills/skills/andyxinweiminicloud/trust-velocity-calculatorWhat This Skill Does
The trust-velocity-calculator is an analytical engine designed to quantify the rate at which trust in an AI skill or agent degrades over time. Unlike traditional models that treat trust as a static binary state—verified or unverified—this skill treats trust as a dynamic, decaying asset. It operates on the principle that trust decay is non-linear and accelerates significantly when a skill experiences rapid changes in behavior, permissions, or dependency architecture.
By measuring the 'Change Velocity,' the skill calculates a trust velocity score that helps administrators and users predict precisely when a credential, agent, or automated workflow will transition from reliable to uncertain. It considers factors like time elapsed since the last audit, the delta in code and dependency surface area, and volatility windows to provide a granular risk assessment.
Installation
To install this skill, run the following command in your terminal:
clawhub install openclaw/skills/skills/andyxinweiminicloud/trust-velocity-calculator
Use Cases
- Compliance Auditing: Periodically scan high-privilege agents to determine if they require a re-verification cycle based on how many updates they have ingested.
- Security Risk Assessment: Automatically downgrade the access permissions of an agent if its trust velocity score crosses a critical threshold due to high-frequency code changes.
- Deployment Governance: Decide whether to approve an automated pull request for an AI agent based on its 'Verification Coverage Lag' metrics.
Example Prompts
- "Check the current trust velocity of the
data-processor-agentand tell me if its recent dependency updates have pushed it below my safety threshold of 0.7." - "Provide a report on the verification coverage lag for the
marketing-automationskill, comparing its current state against the audit from six months ago." - "Calculate the decay factor for all active agents in my workspace. Which agents require an immediate re-audit due to high change volatility?"
Tips & Limitations
This skill is most effective when connected to your deployment pipeline and audit logs. The accuracy of the 'Change Velocity' multiplier depends heavily on the metadata provided to the calculator. Note that it does not perform security patching itself; it strictly acts as an observability and forecasting tool. Be aware that during periods of extreme refactoring, the tool may report high trust decay even if the changes are beneficial. Use it as a decision-support system, not as a hard-block security gate, until you have calibrated your decay thresholds for your specific operational environment.
Metadata
Not sure this is the right skill?
Describe what you want to build — we'll match you to the best skill from 16,000+ options.
Find the right skillPaste this into your clawhub.json to enable this plugin.
{
"plugins": {
"official-andyxinweiminicloud-trust-velocity-calculator": {
"enabled": true,
"auto_update": true
}
}
}Tags(AI)
Flags: data-collection
Related Skills
delta-disclosure-auditor
Helps verify that skill updates publish an auditable record of what changed — catching the gap between "the registry shows the new version" and "anyone can see what the new version changed relative to the old one." v1.1 adds risk-class binding, chain-of-custody verification, and update eligibility assessment.
capability-composition-analyzer
Helps identify dangerous capability combinations that emerge when agent skills are composed — catching the class of risk where no individual skill is harmful but their intersection creates an exfiltration or compromise path.
transparency-log-auditor
Helps verify that skill signing events are recorded in an independently auditable transparency log — catching the class of trust failures where a registry operator can silently rewrite history without detection.
behavioral-invariant-monitor
Helps verify that AI agent skills maintain consistent behavioral invariants across repeated executions — detecting the class of threat where a skill behaves safely during initial evaluation but shifts behavior based on execution count, environmental conditions, or delayed activation triggers. v1.3 adds performance fingerprinting (computational complexity drift detection), cryptographic audit trails (hash-chained behavior logs for immutable verification), and risk-proportional monitoring (sampling-based checks to reduce overhead).
skill-update-delta-monitor
Helps detect security-relevant changes in AI skills after installation. Tracks deltas between the audited version and current version, flagging updates that expand permissions, add new network endpoints, or alter behavior in ways that bypass install-time security checks.