skill-vetter
Security scanning for skills before installation
All Skills in This Repository (1)
Pure Emerald Level IndicatorsFrequently Asked Questions
FAQPage SchemaHow to install skill-vetter?โผ
Run `npx skills add app-incubator-xyz/skill-vetter --all -g -y` in your terminal to install it globally.
How to check if a skill is safe to install?โผ
Run `bash scripts/vett.sh` with a skill name, GitHub URL, or local path. It returns a SAFE, REVIEW, or BLOCKED verdict based on four security scanners.
What does skill-vetter scan for?โผ
It checks for prompt injection, hardcoded API keys and credentials, known malicious patterns, and dangerous shell commands like curl-piped-to-bash.
Does skill-vetter work with Claude Code and OpenClaw?โผ
Yes. It runs as a slash command in Claude Code and OpenClaw sessions, and even works as a Telegram bot command via OpenClaw.
Do I need extra tools for full scans?โผ
Basic secrets and structure checks work out of the box. Install aguara and skill-scanner for full coverage, and run `bash scripts/check-deps.sh` to see what is missing.
Related Repositories in Software Engineering
View All in Software Engineeringโopenclaw
Run a personal AI assistant across your devices and chat apps
superpowers
Gives coding agents a disciplined workflow from idea to merged code
react
AI agent skills for building, testing, and porting React core