skill-vetter

Assess AI skill origin, safety, and compliance before installation.

869|203|Updated May 7, 2026
One-click install
npx skills add https://github.com/freestylefly/wesight --skill skill-vetter-freestylefly
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: skill-vetter
Source: https://github.com/freestylefly/wesight/tree/main/SKILLs/skill-vetter
Command: npx skills add https://github.com/freestylefly/wesight --skill skill-vetter-freestylefly

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security-first vetting ensures that AI skills are safe to install by systematically checking for sources, safety concerns, and potential risks before they ever run in your environment.

Core Features & Use Cases

  • Source checks: Verify origin, author reputation, update history, and community trust before installation.
  • Code review (mandatory): Inspect all skill files for red flags and risky patterns before execution.
  • Permission scope assessment: Evaluate required file access, network access, and commands to ensure minimal and necessary privileges.
  • Risk classification & reporting: Produce a structured vetting report with risk levels and actionable verdicts to guide decisions.
  • Use case: Vet a newly downloaded skill from GitHub before enabling it in your agent workspace.

Quick Start

Run the vetting workflow on a new skill before installation and generate a comprehensive report.

Frequently Asked Questions about skill-vetter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I vet AI skills for security risks before installation?

Vetting AI skills for security risks requires systematic source checks, mandatory code reviews for risky patterns, and permission-scope evaluation before execution. This workflow produces a structured report with risk classifications and actionable verdicts to guide installation decisions.

What is AI skill safety vetting and when do I need it?

AI skill safety vetting is the process of identifying origin, safety, and compliance issues before running new skills in your environment. You need it whenever downloading or installing third-party agent skills, such as new tools sourced from community repositories.

How to assess permission scope and file access for downloaded agent skills?

Assess permission scope by evaluating required file access, network access, and commands to ensure minimal and necessary privileges. This assessment is a core part of the vetting workflow, examining skill content to determine if requested access levels are justified.

Does the vetting process check author reputation and update history?

Yes, the vetting process performs source checks that verify origin, author reputation, update history, and community trust before installation. This ensures the AI skill comes from a reliable source and has been maintained properly over time.

What is the best way to detect red flags in AI skill code?

The best way to detect red flags in AI skill code is through a mandatory code review that inspects all skill files for risky patterns before execution. This workflow satisfies the detection of red flags and produces explicit risk classifications for decision making.