skill-vetter

Analyze AI agent skills for malicious code and risk levels.

10|Updated Jan 28, 2026
One-click install
npx skills add https://github.com/AGIBuild/Agibuild.Fulora --skill skill-vetter-agibuild
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: skill-vetter
Source: https://github.com/AGIBuild/Agibuild.Fulora/tree/main/.cursor/skills/skill-vetter-1.0.0
Command: npx skills add https://github.com/AGIBuild/Agibuild.Fulora --skill skill-vetter-agibuild

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a rigorous security protocol to vet AI agent skills before installation, preventing the introduction of malicious code or risky permissions.

Core Features & Use Cases

  • Security Auditing: Analyzes skills for red flags, suspicious patterns, and unauthorized access attempts.
  • Permission Scrutiny: Evaluates the necessary file, network, and command scopes required by a skill.
  • Risk Classification: Assigns a risk level (Low, Medium, High, Extreme) to guide installation decisions.
  • Use Case: Before installing a new skill from an unknown GitHub repository, use this Skill to perform a comprehensive security review, ensuring it doesn't contain malware or attempt to steal sensitive information.

Quick Start

Use the skill-vetter to analyze the security of the skill located at the provided GitHub URL.

Frequently Asked Questions about skill-vetter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I vet AI agent skills for security risks before installation?

To vet AI agent skills for security risks, you need a protocol that analyzes source code, permissions, and network access to detect malware and data exfiltration. The skill-vetter performs this analysis, classifying skills into risk levels from Low to Extreme.

What is the best way to check GitHub skills for malicious code?

Checking GitHub skills for malicious code requires analyzing the source for suspicious patterns and unauthorized access attempts. This security auditing protocol evaluates file and network scopes, assigning a risk classification to guide your installation decisions.

How does a security risk assessment classify permissions for AI skills?

A security risk assessment for AI skills classifies permissions by evaluating the necessary file, network, and command scopes required by the skill. This scrutiny identifies unauthorized access attempts and assigns a risk level ranging from Low to Extreme.

Can I use an automated vetting protocol for skills from any source?

Yes, you can use this vetting protocol to analyze skills from any source, including GitHub and ClawdHub. It ensures adherence to security best practices by checking for malicious code, data exfiltration, and unauthorized access before installation.

What risk levels are assigned during AI skill code review?

During code review, AI skills are assigned a risk level of Low, Medium, High, or Extreme. This classification guides installation decisions by indicating the severity of detected red flags, suspicious patterns, and unauthorized permission scopes.

When do I need malware detection for AI agent skills?

You need malware detection for AI agent skills whenever installing a new skill from an unknown repository or source. Running a security review ensures the skill does not contain malicious code or attempt to steal sensitive information.