Skill Vetter

Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.

Join 0+ developers using this skill

skill

Security & Privacy

beginner

0 installs

View Source

Last updated: April 23, 2026

AI Skill Market Insights

Real data. Real impact.

Popularity

Rising

Emerging

Active Users

Developers

Quick Start

Manual Installation

No automatic installation available. Please visit the source repository for installation instructions.

View Installation Instructions

TEAR & SHARE

3-5hrs/WK

RISING

0.0K+ USING

Key Features

Structured four-step vetting protocol that covers source verification, mandatory code review, permission scope evaluation, and risk classification
Red flag detection for dangerous patterns including unauthorized credential access, external data transmission, obfuscated code, and unvetted package installations
Risk classification system with four levels (LOW, MEDIUM, HIGH, EXTREME) and clear installation verdicts
GitHub-ready bash commands using curl and jq to fetch repository metadata, file listings, and documentation for rapid assessment
Standardized vetting reports with consistent formatting for easy comparison across multiple skill candidates
Supply-chain awareness that checks author reputation, download counts, update frequency, and community trust signals

Use Cases

Evaluating ClawHub-published skills before adding them to your agent workflow
Auditing GitHub-hosted skills shared by colleagues or discovered in the community
Building organizational policies around which skills meet your security threshold
Training new team members on what to look for when reviewing agent capabilities

How It Works

Skill Vetter operates as an instruction-only checklist — it contains no executable code. When invoked, your agent reads all candidate skill files and performs GitHub API queries to gather metadata. It then generates a standardized vetting report with risk assessments, flagged patterns, and a clear install or reject verdict.

Getting Started

Install Skill Vetter from ClawHub and invoke it before installing any new skill. No configuration or API keys are required — it works entirely through structured analysis guidelines and shell commands that any agent can execute immediately.

Skill Vetter

AI Skill Market Insights

Quick Start

Manual Installation

TEAR & SHARE

Tags

Check Security

Be Part of the 0+ Developer Community

Key Features

Use Cases

How It Works

Getting Started

SkillSpector (skill security scanner)

Check Aws Security

Check Privacy

AddressSanitizer (Trail of Bits)

Channels

Learn

Compare

Company

Agents