Agent skill · security · aiskillstore
agent-skill-trust-check
Static pre-install trust review for SKILL.md, OpenClaw, Hermes, MCP, and agent-skill marketplace packages before they request local, account, payment, or external access.
Why this skill is useful
Adds a static pre-install trust review process for third-party agent skills that identifies risky behaviors and suggests fixes, which the AI wouldn't reliably generate on its own.
What it needs
Requires node installed locally. About 2k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Agent Skill Trust Check Use this skill before installing a third-party agent skill, SKILL.md package, MCP-linked skill, or marketplace listing. What This Skill Does Reads a public or local skill description before install. Flags patterns that deserve review: shell execution, destructive commands, secrets, wallet/payment actions, network output, persistence, and prompt-boundary issues. Separates basic provenance signals from risky behavior signals. Produces a patch order that a maintainer can resolve before the skill is trusted. When To Use Use this when an agent is about to install or recommend a skill from: OpenClaw, Hermes, or ClawHub-style marketplaces. Claude Code, Codex, Cursor, Windsurf, or Gemini skill directories. MCP-linked skill bundles. GitHub repositories that include a SKILL.md, tool manifest, or install script. Run From The Public Repo Marketplace-safe stdin mode: For JSON output: npm command: Review Rules Before installation, check: Does the skill run shell commands, package installers, or process-spawn APIs? Does it read secrets, environment variables, wallet data, credentials, cookies, or private keys? Does it send content to remote URLs or webhooks? Does it create persistent background jobs? Does it ask the agent to ignore or override higher-priority instructions? Does it document source, license, version, tests, permissions, and uninstall steps? Boundaries This is a static pre-install check. The marketplace-safe runner reads only stdin and returns JSON. The local CLI can also read a local path or a public GitHub/raw/Gist URL when run from the repository checkout. Neither mode executes the target skill or proves the runtime is safe. For marketplace-grade review, use the paid Agent Skill Trust Check listing: https://orkai.ai/skills/agent-skill-trust-check
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/agent-skill-trust-check