skill-vetter

To vet AI agent skills for security risks, evaluate the source origin, author reputation, and code recency. Apply a mandatory code review to catch red flags, analyze permission scopes, and classify the risk level before installation.

Permission scope analysis for AI skills ensures the code requests minimal, justified access and scrutinizes external network calls. This process prevents poorly scoped code from compromising your environment before integration.

Perform a code review on AI skills by applying mandatory checks for risky patterns and red flags. This vetting protocol guides you through source evaluation and risk classification to decide whether to proceed or discard.

Yes, you can apply this security vetting protocol across ClawdHub, GitHub, and shared agent repositories. It standardizes risk assessment and code review to identify unsafe permissions before you install any found skill.

The best way to assess author reputation and source origin is to verify trust signals and recency during source evaluation. This vetting process builds trust and highlights potential red flags before integration.

You should not install a third-party AI skill when code review identifies risky external network calls, unjustified permission scopes, or unresolved red flags. Risk classification determines if exposure to unsafe code is too high.