skill-vetter

Vet AI agent skills for unsafe patterns and produce risk classification reports.

Updated Apr 14, 2026
One-click install
npx skills add https://github.com/novolei/if2Ai --skill skill-vetter-novolei
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: skill-vetter
Source: https://github.com/novolei/if2Ai/tree/main/src-tauri/resources/bundled-skills/skill-vetter
Command: npx skills add https://github.com/novolei/if2Ai --skill skill-vetter-novolei

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This tool helps safely vet AI agent skills before installation from external sources like ClawdHub or GitHub, by checking risk flags, permission scopes, and suspicious patterns.

Core Features & Use Cases

  • Vetting protocol: Source check, code review, and permission scope evaluation to prevent unsafe skills.
  • Risk assessment: Classify risk levels and provide safety guidance for installation decisions.
  • Use Case: Before integrating a new skill into an AI agent, run the vetting protocol to ensure it won't exfiltrate data or modify systems.

Quick Start

Run the vetting protocol on the new skill to generate a safety report before installation.

Frequently Asked Questions about skill-vetter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I vet AI agent skills for security risks before installing them?

To vet AI agent skills for security risks, run a vetting protocol that performs source checks, code reviews, and permission scope evaluations to produce a formal risk classification report and installation verdict.

What is the best way to check external AI skills for unsafe permissions?

The best way to check external AI skills for unsafe permissions is through a formal permission scope evaluation that identifies suspicious patterns and flags risks of data exfiltration or unauthorized system modifications.

Can I use this vetting protocol on skills downloaded from GitHub or ClawdHub?

Yes, you can use this vetting protocol on skills downloaded from GitHub, ClawdHub, or other shared sources, applying source checks and code reviews to prevent unsafe installations across platforms.

What does a risk assessment report include when evaluating agent skills?

A risk assessment report for agent skills includes a formal vetting verdict, risk classification levels, and safety guidance derived from evaluating the source, code, and permission scopes before installation.

Why do I need to review code and permissions before integrating new AI agent skills?

You need to review code and permissions before integrating new AI agent skills to prevent threats like data exfiltration or unauthorized system modifications that could compromise your environment.

Are there limitations to automated vetting for shared agent skills?

Automated vetting for shared agent skills relies on evaluating source, code, and scope to classify risks, but users should still manually review flagged safety guidance before finalizing installation decisions.