← Back to Skills Marketplace
Skill Vetter Guide
by
VibeSparkingAI
· GitHub ↗
· v1.1.0
· MIT-0
138
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install skill-vetter-guide
Description
Guide for vetting third-party OpenClaw skills before installation using the Skill Vetter security protocol. Use when installing any third-party skill, auditi...
Usage Guidance
This guide is coherent and useful for its stated purpose, but take these precautions before using it: (1) verify the actual source repo before fetching or copying files (the registry entry lists 'unknown'); (2) when running audits, prefer read-only scans and keep a human-in-the-loop for any HIGH/EXTREME findings; (3) do not let automated prompts or an agent write AGENTS.md or install cron jobs without manual review — those are persistent changes that affect all agents; (4) when following the guide to vet a skill, pay extra attention to any skill that reads ~/.ssh, ~/.aws, openclaw config files, or performs outgoing network requests; (5) keep an audit trail of who authorized adding enforcement rules or scheduled tasks so changes can be reverted if needed.
Capability Assessment
Purpose & Capability
The name/description (a guide to vet third-party skills) match the actual content: an instruction-only skill with no required binaries, env vars, or installs. All declared requirements (none) are proportionate to the stated purpose.
Instruction Scope
The SKILL.md correctly instructs reviewers to fetch and review every file in candidate skills and to write standardized reports. That scope is appropriate for a vetting tool, but the guide also recommends writing to local memory/audit files, editing AGENTS.md, and creating cron jobs to run periodic scans. Those are reasonable for enforcement, but they grant the vetting process broad read/write access to agent config and skills directories — ensure human oversight and read-only scanning where appropriate.
Install Mechanism
No install spec or code files are present; this is instruction-only, which minimizes installation risk. The SKILL.md references a canonical source (ClawHub/GitHub), but the registry entry's source is 'unknown' — verify the actual repository before fetching anything.
Credentials
The skill requests no environment variables, credentials, or special config paths. The red-flag checklist within the guide intentionally mentions sensitive locations (e.g., ~/.ssh, ~/.aws) as things to look for in other skills — it does not request access to them itself.
Persistence & Privilege
Although the skill is not set to always:true and does not autonomously require credentials, it explicitly recommends persistent enforcement steps (adding a rule to AGENTS.md; setting up a cron job every 4 hours). These changes would create persistent, system-level behavior that should be applied only with explicit human approval and careful review of the automation scripts.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skill-vetter-guide - After installation, invoke the skill by name or use
/skill-vetter-guide - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
Add full English versions; add zh-CN translations for all files
v1.0.0
- Initial release of skill-vetter-guide: a comprehensive protocol for securely vetting third-party OpenClaw skills before installation.
- Introduces Mandatory Full Code Review SOP with clear risk grading and red-flag checklists.
- Defines security roles and strict audit/report processes for periodic skill verification.
- Provides ready-made prompt templates and AGENTS.md enforcement rules to mandate use across agents.
- Includes detailed documentation on setup, vetting workflows, and multi-instance considerations.
Metadata
Frequently Asked Questions
What is Skill Vetter Guide?
Guide for vetting third-party OpenClaw skills before installation using the Skill Vetter security protocol. Use when installing any third-party skill, auditi... It is an AI Agent Skill for Claude Code / OpenClaw, with 138 downloads so far.
How do I install Skill Vetter Guide?
Run "/install skill-vetter-guide" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Skill Vetter Guide free?
Yes, Skill Vetter Guide is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Skill Vetter Guide support?
Skill Vetter Guide is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Skill Vetter Guide?
It is built and maintained by VibeSparkingAI (@vibesparkingai); the current version is v1.1.0.
More Skills