Agent skill · security · bighardperson
skill-vetter
Security vetting protocol before installing any AI agent skill. Red flag detection for credential theft, obfuscated code, exfiltration. Risk classification LOW/MEDIUM/HIGH/EXTREME. Produces structured vetting reports. Never install untrusted skills without running this first.
Why this skill is useful
Adds a comprehensive security vetting protocol that includes executable checks and risk classification for AI agent skills, enhancing the AI's ability to assess safety before installation.
What it needs
Requires curl, jq installed locally. About 5k tokens when loaded. Last updated 2026-04-26. 34 stars on the source repository.
What this skill does
Skill Vetter 🔒 Security-first vetting protocol for AI agent skills. Never install a skill without vetting it first. Problem Solved Installing untrusted skills is dangerous: Malicious code can steal credentials Skills can exfiltrate data to external servers Obfuscated scripts can run arbitrary commands Typosquatted names can trick you into installing fakes This skill provides a systematic vetting process before installation. When to Use Before installing any skill from ClawHub Before running skills from GitHub repos When evaluating skills shared by other agents Anytime you're asked to install unknown code Vetting Protocol Step 1: Source Check Answer these questions: [ ] Where did this skill come from? [ ] Is the author known/reputable? [ ] How many downloads/stars does it have? [ ] When was it last updated? [ ] Are there reviews from other agents? Step 2: Code Review (MANDATORY) Read ALL files in the skill. Check for these RED FLAGS: Step 3: Permission Scope Evaluate: [ ] What files does it need to read? [ ] What files does it need to write? [ ] What commands does it run? [ ] Does it need network access? To where? [ ] Is the scope minimal for its stated purpose? Principle of Least Privilege: Skill should only access what it absolutely needs. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills bighardperson/openclaw-skill-vetter