Trust Report

API Documentation Generator

Generate comprehensive, professional API documentation following industry best practices

CONDITIONAL

Format: openclawScanner: v0.8.0Duration: 10msScanned: 6d ago · Jun 1, 9:03 PMSource →

Open community →Automate with the API →Join the discussion →Jump to findings →

Embed this badge

[![AgentVerus](https://agentverus.ai/api/v1/skill/7013b4cc-eb3b-4fb6-b22d-d44601f22df9/badge)](https://agentverus.ai/skill/7013b4cc-eb3b-4fb6-b22d-d44601f22df9)

Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

Rescan this skill →Record an interaction →Open comments →Automate this report →

https://agentverus.ai/api/v1/skill/7013b4cc-eb3b-4fb6-b22d-d44601f22df9/trust

Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction

curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"7013b4cc-eb3b-4fb6-b22d-d44601f22df9","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'

Fetch trust JSON

curl https://agentverus.ai/api/v1/skill/7013b4cc-eb3b-4fb6-b22d-d44601f22df9/trust

Category Scores

Permissions

100

Injection

Dependencies

Behavioral

Content

100

Code Safety

Findings (5)

mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://api.example.com/api/v1/users/123?include=orders

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04

mediumMany external URLs referenced (4)-8

The skill references 4 external URLs and also discusses auth/API/payment workflows, which increases the chance that sensitive operations depend on many remote endpoints.

URLs: https://api.example.com/api/v1/users/123?include=orders, https://api.example.com/api/v1/users, https://api.example.com/oauth/token, https://api.example.com/api/v1/users/123

→ Minimize external dependencies to reduce supply chain risk.

dependenciesASST-04

mediumFederated auth flow detected-10

Found federated auth flow pattern: "OAuth"

2. **Authentication** - How to authenticate (API keys, OAuth, JWT)

→ Treat OAuth, 2FA, and token-refresh guidance as authentication-sensitive workflows. Explain scope, storage, and refresh behavior clearly so agents do not handle more credential material than necessary.

behavioralASST-05

mediumUnknown external reference-8

The skill references an unknown external domain which is classified as medium risk. Merged overlapping signals from the repeated finding family: - Unknown external reference

https://api.example.com/api/v1/users/123?include=orders

→ Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04

lowNo explicit safety boundaries-10

The skill does not include explicit safety boundaries defining what it should NOT do.

No safety boundary patterns found

→ Add a 'Safety Boundaries' section listing what the skill must NOT do (e.g., no file deletion, no network access beyond needed APIs).

contentASST-09