skill-vetter

Vet AI skills for security risks before installation.

3|Updated Jan 14, 2022

Search Tags:#security #ai #skills #compliance #code-review #risk #vetting

Ready to run

npx skills add https://github.com/bingran-you/bingran-you --skill skill-vetter-bingran-you

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: skill-vetter
Source: https://github.com/bingran-you/bingran-you/tree/main/repo-skills/skill-vetter
Command: npx skills add https://github.com/bingran-you/bingran-you --skill skill-vetter-bingran-you

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security-focused vetting protocol ensures AI skills are safe to install by surfacing red flags, permission scope, and suspicious patterns before integration.

Core Features & Use Cases

Source checks for origin, author reputation, downloads/stars, and recency to determine trustworthiness.
Mandatory code review workflow with explicit red-flag criteria and a structured assessment.
Permission and risk evaluation to ensure minimal file access and safe operational boundaries across skill deployment.

Quick Start

Run the Vetting Protocol on a candidate skill before installation.

Frequently Asked Questions about skill-vetter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I vet AI skills for security risks before installation?▼

You can vet external AI skills for security by running this protocol, which evaluates origin, author reputation, permission scope, and code patterns to output a structured report with metrics and risk classification.

What is security-focused vetting for AI skills?▼

Security-focused vetting for AI skills is a protocol that surfaces red flags, permission scope, and suspicious code patterns before integration to ensure external skills are safe to install and deploy.

Does skill vetting work with external sources like GitHub?▼

Yes, skill vetting works with any external source, including GitHub and ClawdHub. It evaluates trustworthiness by checking origin, author reputation, download metrics, and recency before installation.

What do I need to provide to run a code review on an AI skill?▼

You need to provide the candidate AI skill and ensure its SKILL.md file contains YAML frontmatter with the required name and description fields to generate a structured vetting report.

What does an AI skill vetting report include?▼

An AI skill vetting report includes structured metrics, identified red flags, permission scope evaluation, and a final risk assessment to help determine if the skill is safe to install.