← 返回 Skills 市场
119
总下载
0
收藏
2
当前安装
1
版本数
在 OpenClaw 中安装
/install skill-vetter-bak
功能描述
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
安全使用建议
This skill is fundamentally coherent: it describes how to vet other skills and gives concrete checks and example commands. Before installing/using it, verify two small issues: (1) the SKILL.md examples use curl and jq but the registry metadata doesn't list required binaries — ensure your agent environment actually has those tools or update the skill to declare them; (2) the _meta.json ownerId/publishedAt differ from the registry metadata shown — confirm the skill author and source to avoid supply-chain confusion. Also remember the vetter will perform network calls (GitHub/raw.githubusercontent) when run — treat network access and fetched content as untrusted and do a manual review for high-risk skills.
功能分析
Type: OpenClaw Skill
Name: skill-vetter-bak
Version: 1.0.0
The skill-vetter bundle is a security-focused utility designed to guide AI agents through a structured protocol for auditing other skills. It includes comprehensive checklists for identifying red flags such as data exfiltration, obfuscation, and unauthorized system access, and provides helper commands for inspecting GitHub repository metadata. No malicious logic or suspicious behaviors were found in SKILL.md or _meta.json.
能力评估
Purpose & Capability
The name/description (skill vetter) align with the SKILL.md: it only describes manual/automated checks and GitHub queries. However the SKILL.md uses curl and jq examples but the skill metadata declares no required binaries — a mismatch that could cause runtime failures or unexpected behavior.
Instruction Scope
Instructions focus on reviewing skill files and checking repository metadata. They do not instruct the agent to access unrelated system credentials or config files. They do include 'Read ALL files in the skill' (which is appropriate) and example commands that perform network calls to GitHub/raw.githubusercontent; the agent will need network access to run those examples.
Install Mechanism
Instruction-only skill with no install spec and no code files — low disk-write risk. There is no download/install behavior declared in the skill itself.
Credentials
The skill requests no environment variables or credentials, which is appropriate. It does assume availability of networking and CLI tools (curl, jq) but does not declare them. No sensitive secrets are requested.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent presence or elevated privileges. Nothing in SKILL.md instructs it to modify other skills or system-wide configs.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install skill-vetter-bak - 安装完成后，直接呼叫该 Skill 的名称或使用
/skill-vetter-bak触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
skill-vetter-bak v1.0.0
- Initial release introducing a security-first vetting protocol for AI agent skills.
- Provides a detailed step-by-step vetting checklist for source, code review, permission scope, and risk classification.
- Includes a standardized output report template for documenting vetting results.
- Offers practical shell commands to assist with vetting GitHub-hosted skills.
- Establishes a trust hierarchy and clear guidance for handling different skill risk levels.
元数据
常见问题
Skill Vetter.Bak 是什么？
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 119 次。
如何安装 Skill Vetter.Bak？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skill-vetter-bak」即可一键安装，无需额外配置。
Skill Vetter.Bak 是免费的吗？
是的，Skill Vetter.Bak 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Skill Vetter.Bak 支持哪些平台？
Skill Vetter.Bak 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Skill Vetter.Bak？
由 aysun168（@aysun168）开发并维护，当前版本 v1.0.0。
推荐 Skills