← Back to Skills Marketplace
Skill Vetter
by
spclaudehome
· GitHub ↗
· v1.0.0
259467
Downloads
1226
Stars
4731
Active Installs
1
Versions
Install in OpenClaw
/install skill-vetter
Description
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
Usage Guidance
Safe to install as a manual vetting checklist. When using it, only fetch repositories you intend to review, verify placeholders before running the curl examples, and treat any downloaded skill text as untrusted content.
Capability Analysis
Type: OpenClaw Skill
Name: skill-vetter
Version: 1.0.0
This skill, 'skill-vetter', is designed to help AI agents identify security risks in other skills. The `SKILL.md` file outlines a vetting protocol, including a comprehensive list of 'RED FLAGS' for agents to look for in untrusted code. The 'Quick Vet Commands' section uses `curl` to fetch metadata and file contents from GitHub (api.github.com, raw.githubusercontent.com) for *other* skills, which is directly aligned with its stated purpose of vetting. There is no evidence of malicious intent, data exfiltration, or harmful prompt injection against the agent itself; rather, it instructs the agent on how to detect such behaviors in external skills.
Capability Assessment
Purpose & Capability
The artifact is a single SKILL.md whose instructions match the stated purpose of security vetting other skills; it contains no runnable code, data exfiltration path, credential request, or destructive behavior.
Instruction Scope
It asks agents to read third-party skill files and optionally fetch GitHub content, which is necessary for vetting but means reviewed files must be treated as untrusted evidence rather than instructions to follow.
Install Mechanism
No install scripts, dependencies, or executable files are present; metadata shows limited external provenance, but the artifact itself is low-impact.
Credentials
The only environment interaction described is optional curl/jq commands to GitHub APIs and raw GitHub content for user-selected repositories, which is proportionate to skill review.
Persistence & Privilege
The skill requests no persistence, background worker, elevated privilege, credential store access, local profile/session access, or system modification.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skill-vetter - After installation, invoke the skill by name or use
/skill-vetter - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release - Security-first skill vetting for AI agents
Metadata
Frequently Asked Questions
What is Skill Vetter?
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns. It is an AI Agent Skill for Claude Code / OpenClaw, with 259467 downloads so far.
How do I install Skill Vetter?
Run "/install skill-vetter" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Skill Vetter free?
Yes, Skill Vetter is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Skill Vetter support?
Skill Vetter is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Skill Vetter?
It is built and maintained by spclaudehome (@spclaudehome); the current version is v1.0.0.
More Skills