Scan ClawHub skill packages for installation risks and report findings.
npx skills add https://github.com/anzx01/LocalClaw --skill skill-vetter-anzx01
Please help me install this Agent Skill. Skill: skill-vetter Source: https://github.com/anzx01/LocalClaw/tree/main/bundled_skills/skill-vetter Command: npx skills add https://github.com/anzx01/LocalClaw --skill skill-vetter-anzx01
Automates a pre-installation security and risk review for marketplace skills so administrators can detect potential threats before adding third-party capabilities to LocalClaw.
Provide the ClawHub slug to the skill-vetter to run a security scan and return a risk summary.
High-intent search queries and answers about installing and using this skill.
A pre-installation security review analyzes a ClawHub skill package by invoking the clawhub_scan tool with its slug to return risk indicators and findings without executing untrusted code.
Checking a community skill for installation risks involves providing its ClawHub slug to an automated scan that returns risk indicators and findings to inform your LocalClaw approval workflow.
No, the security review does not execute untrusted code; it safely analyzes the ClawHub skill package using the clawhub_scan tool to identify potential threats and installation risks.
Yes, the risk assessment is designed for LocalClaw marketplace approval workflows, producing risk indicators and findings to help administrators vet third-party capabilities prior to installation.
To run a security scan on a marketplace skill, you need to provide the ClawHub skill slug as input to the clawhub_scan tool to retrieve risk indicators and security findings.
An automated skill package scan for risk indicators is needed when a LocalClaw operator receives a community skill and must vet its safety and compliance before approving installation.
eanzhaoConvert arbitrary text into URL-friendly slugs for URLs, filenames, and identifiers.
MohibShaikhAnalyze OpenClaw skills with a six-pass pipeline to identify threats and quality issues.
maruakshayEnforce dataset integrity, provenance, and versioning controls for ML pipelines.
h4vzzScan source code for security vulnerabilities and generate SARIF reports.
