skill-vetter

Review AI agent skills for security risks and permission scope.

Updated Mar 12, 2026
One-click install
npx skills add https://github.com/Maosixian/selfused-xavier-lobsterop --skill skill-vetter-maosixian
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: skill-vetter
Source: https://github.com/Maosixian/selfused-xavier-lobsterop/tree/main/skills/skill-vetter
Command: npx skills add https://github.com/Maosixian/selfused-xavier-lobsterop --skill skill-vetter-maosixian

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive vetting process for AI agents before installation, identifying potential security risks and ensuring safe operation.

Core Features & Use Cases

  • Source Check: Verify the origin and reputation of the skill.
  • Code Review: Check for malicious patterns and permissions.
  • Permission Scope: Evaluate the required file and network access.
  • Risk Classification: Categorize risks from low to extreme.
  • Output Format: Generate a detailed vetting report.
  • Quick Vet Commands: Automate vetting for GitHub-hosted skills.
  • Trust Hierarchy: Establish trust levels based on skill sources and authors.
  • Remember: Emphasize security, caution, and documentation.

Quick Start

Run the 'vet' command on a skill to perform a security check.

Frequently Asked Questions about skill-vetter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security review on an AI agent skill before installation?

To perform AI skill vetting, run the 'vet' command on the target skill to execute a security-first check. This process identifies malicious patterns, evaluates permission scope, and generates a detailed risk classification report for safe installation.

What is AI skill vetting and how does it classify security risks?

AI skill vetting is a security-first assessment process that categorizes installation risks from low to extreme. It evaluates code origin, permission scope, and suspicious patterns to produce a detailed security vetting report.

Can I automate security checks for GitHub-hosted AI skills?

Yes, you can automate security checks for GitHub-hosted AI skills using the Quick Vet commands. This automated vetting feature evaluates the skill's source, reviews code for malicious patterns, and outputs a risk assessment report.

Does AI skill vetting evaluate file and network permission scopes?

Yes, AI skill vetting evaluates required file and network permission scopes during the security review. It checks the permission scope to identify red flags and ensures the skill operates within safe access boundaries.

What are the limitations of automated code review for AI agent skills?

Automated code review for AI agent skills focuses on identifying suspicious patterns and permission scopes but relies on establishing trust hierarchies based on skill sources and authors. It outputs a detailed vetting report to guide manual security decisions.