Vet AI skills for security risks before installation.
npx skills add https://github.com/bingran-you/bingran-you --skill skill-vetter-bingran-you
Please help me install this Agent Skill. Skill: skill-vetter Source: https://github.com/bingran-you/bingran-you/tree/main/repo-skills/skill-vetter Command: npx skills add https://github.com/bingran-you/bingran-you --skill skill-vetter-bingran-you
Security-focused vetting protocol ensures AI skills are safe to install by surfacing red flags, permission scope, and suspicious patterns before integration.
Run the Vetting Protocol on a candidate skill before installation.
High-intent search queries and answers about installing and using this skill.
You can vet external AI skills for security by running this protocol, which evaluates origin, author reputation, permission scope, and code patterns to output a structured report with metrics and risk classification.
Security-focused vetting for AI skills is a protocol that surfaces red flags, permission scope, and suspicious code patterns before integration to ensure external skills are safe to install and deploy.
Yes, skill vetting works with any external source, including GitHub and ClawdHub. It evaluates trustworthiness by checking origin, author reputation, download metrics, and recency before installation.
You need to provide the candidate AI skill and ensure its SKILL.md file contains YAML frontmatter with the required name and description fields to generate a structured vetting report.
An AI skill vetting report includes structured metrics, identified red flags, permission scope evaluation, and a final risk assessment to help determine if the skill is safe to install.
Wanger-SJTUDetect SKILL.md files and extract metadata into structured YAML blocks.
MohabsmarVet AI skills from ClawdHub and GitHub for source credibility, code integrity, and permission scopes.
steven508508Vet AI skills for security risks, permissions, and suspicious code patterns.
jassicsReview third-party dependencies for typosquatting, dependency confusion, and malicious scripts.
