Clawmon

What This Skill Does

Clawmon is a specialized trust registry lookup service for OpenClaw agents, built on the ERC-8004 standard and the Monad blockchain. It serves as a decentralized "reputation engine" that allows your AI agent to assess the security and reliability of third-party MCP (Model Context Protocol) skills before they are executed.

By querying the Clawmon API, your agent can retrieve objective security metadata, including hardened trust scores, TEE (Trusted Execution Environment) attestation status, and staking information. This acts as a vital safety filter, providing quantitative insights into whether a specific skill is recognized as reputable or potentially flagged as malicious. The service is entirely read-only, ensuring that your agent interacts with it without needing to manage private keys, wallets, or authentication tokens.

Installation

To integrate Clawmon into your OpenClaw environment, execute the following command in your terminal or via the OpenClaw management console:

clawhub install openclaw/skills/skills/drewm33/clawmon

Once installed, no further configuration or environment variables are required. The skill is immediately ready to process requests to the official Clawmon API endpoint.

Use Cases

1. Proactive Skill Auditing: Before allowing a new or unknown MCP skill to perform sensitive operations like file management or network requests, use Clawmon to check if the skill has a high trust score or valid TEE attestation.
2. Security Risk Assessment: When browsing for new tools, use Clawmon to compare similar MCP skills by their hardened scores, ensuring you choose the most reliable option verified by the community.
3. Automated Governance: Advanced agents can be programmed to conditionally execute tools only if they meet a minimum trust threshold (e.g., 'AAA' tier or a hardened score above 80).

Example Prompts

• "Can you check the trust score for the 'browser-automation' MCP skill before I grant it permissions?"
• "Find the top-rated file management tools in the Clawmon leaderboard and report their TEE attestation status."
• "Is the skill 'gmail-integration' verified by a TEE match, and does the publisher have a high staking tier?"

Tips & Limitations

Clawmon is an advisory tool. A high score indicates a good reputation, but it does not guarantee that a skill is immune to bugs or vulnerabilities. Always use discretion when authorizing skills that request extensive system access. Do not trigger Clawmon checks automatically for every single tool call, as this may lead to unnecessary network overhead. Use it selectively for security-sensitive workflows or during the initial setup of new integrations. The API is strictly read-only, so it cannot perform any destructive actions on the network or your local machine.