Manage skill trust by staking USDC bonds, paying micro-fees for verified skills, reporting malicious skills, and participating in decentralized governance vi...
Real data. Real impact.
Emerging
Developers
Per week
Open source
Skills give you superpowers. Install in 30 seconds.
Chain-agnostic security infrastructure for OpenClaw skills. Auditors stake USDC to vouch for skill safety, users pay micro-fees to access verified skills, and malicious skills get slashed through decentralized governance -- all powered by CCTP on Arc.
clawhub install arc-security
Set the following environment variables:
| Variable | Required | Description |
|---|---|---|
| Yes | Arc testnet RPC endpoint (default: |
| Yes | Deployed SkillSecurityRegistry contract address |
| Yes | Wallet private key (for signing transactions) |
| Yes | x402 payment server URL |
| No | Ethereum Sepolia RPC (for cross-chain operations) |
| No | Base Sepolia RPC (default: |
| No | Arbitrum Sepolia RPC (default: |
checkQuery on-chain bond status, auditor count, usage stats, and computed trust score for any skill.
clawhub arc-security check <skill_id>
Example output:
Skill: youtube-downloader ├─ Bonded: 100.00 USDC by 3 auditors ├─ Used: 1,250 times ├─ Trust Score: 75/100 ├─ Status: Safe to use └─ Created: 2025-06-15 14:30:00
Trust Score is calculated as:
usePays the 0.10 USDC usage fee via x402 and downloads the skill package. Automatically selects the cheapest payment path based on your wallet balances.
clawhub arc-security use <skill_id>
Payment chain selection priority:
bondStake USDC as a security bond to vouch for a skill's safety. If the skill is found malicious, 50% of your stake is slashed.
clawhub arc-security bond <skill_id> <amount> <source_chain>
Arguments:
skill_idamount50source_chainethereum-sepoliabase-sepoliaarbitrum-sepoliaarc-testnetExample:
clawhub arc-security bond youtube-downloader 50 base-sepolia
reportSubmit a claim that a skill is malicious. Requires a 1 USDC anti-spam deposit (refunded if the claim is validated).
clawhub arc-security report <skill_id> --evidence <ipfs_hash>
Example:
clawhub arc-security report bad-skill --evidence QmXyz123...
Opens a 72-hour voting window for auditors.
vote-claimCast a vote on whether a reported skill is malicious. Only wallets that have staked on any skill are eligible to vote. Vote weight is based on total stake and audit track record.
clawhub arc-security vote-claim <claim_id> <support|oppose>
Vote weight formula:
sqrt(totalStaked) * (successfulAudits / totalAudits)claim-earningsWithdraw your share of usage fees earned as an auditor. Fees are split 70% to auditors (proportional to stake) and 30% to the insurance pool.
clawhub arc-security claim-earnings <destination_chain>
Supported destination chains:
arc-testnetethereum-sepoliabase-sepoliaarbitrum-sepolia| Chain | CCTP Domain | Payment | Bonding | Earnings |
|---|---|---|---|---|
| Arc Testnet | 100 | Direct | Direct | Direct |
| Ethereum Sepolia | 0 | CCTP | CCTP | CCTP |
| Base Sepolia | 6 | CCTP | CCTP | CCTP |
| Arbitrum Sepolia | 3 | CCTP | CCTP | CCTP |
| Action | Cost | Distribution |
|---|---|---|
| Use a skill | 0.10 USDC | 70% auditors, 30% insurance pool |
| Submit a claim | 1.00 USDC deposit | Refunded if claim validated |
| Guilty verdict | 50% of bond slashed | 80% to victim, 20% to insurance |
User (any chain) │ ├── CCTP burn ──► Arc Testnet ──► SkillSecurityRegistry (bonds, fees, claims) │ │ └── x402 GET ──► Payment Server ◄────────┘ (verifies payment on-chain) │ └──► Skill package (ZIP)
MIT
No automatic installation available. Please visit the source repository for installation instructions.
View Installation Instructions
1,500+ AI skills, agents & workflows. Install in 30 seconds. Part of the Torly.ai family.
© 2026 Torly.ai. All rights reserved.