app-incubator-xyzapp-incubator-xyzOfficialยท1 Agent Skills Included

skill-vetter

Security scanning for skills before installation

Scans any skill for prompt injection, leaked credentials, and malicious code before you install it. Runs four scanners against ClawHub names, GitHub URLs, or local folders and returns a clear SAFE, REVIEW, or BLOCKED verdict. Removes the guesswork and risk of installing untrusted third-party code into your agent environment.
npx skills add app-incubator-xyz/skill-vetter --all -g -y

All Skills in This Repository (1)

Pure Emerald Level Indicators

Frequently Asked Questions

FAQPage Schema
How to install skill-vetter?โ–ผ

Run `npx skills add app-incubator-xyz/skill-vetter --all -g -y` in your terminal to install it globally.

How to check if a skill is safe to install?โ–ผ

Run `bash scripts/vett.sh` with a skill name, GitHub URL, or local path. It returns a SAFE, REVIEW, or BLOCKED verdict based on four security scanners.

What does skill-vetter scan for?โ–ผ

It checks for prompt injection, hardcoded API keys and credentials, known malicious patterns, and dangerous shell commands like curl-piped-to-bash.

Does skill-vetter work with Claude Code and OpenClaw?โ–ผ

Yes. It runs as a slash command in Claude Code and OpenClaw sessions, and even works as a Telegram bot command via OpenClaw.

Do I need extra tools for full scans?โ–ผ

Basic secrets and structure checks work out of the box. Install aguara and skill-scanner for full coverage, and run `bash scripts/check-deps.sh` to see what is missing.

Related Repositories in Software Engineering

View All in Software Engineeringโ†’