skills.rest
pixiesgeosun
pixiesgeosunCOMMUNITY
Explore all skills by this author →
GitHub

skill-vetter

Review AI agent skills for security risks before installation.

Updated Jun 6, 2026
Search Tags:#code review#security#AI agent#risk assessment#skill vetting
One-click install
npx skills add https://github.com/pixiesgeosun/agent-skills --skill skill-vetter-pixiesgeosun
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: skill-vetter
Source: https://github.com/pixiesgeosun/agent-skills/tree/main/skill-vetter
Command: npx skills add https://github.com/pixiesgeosun/agent-skills --skill skill-vetter-pixiesgeosun

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This skill addresses the security risks associated with installing AI agent skills from various sources by providing a vetting protocol to identify potential issues before installation.

Core Features & Use Cases

  • Source Check: Verify the origin and reputation of the skill source.
  • Code Review: Identify and reject malicious or risky code patterns.
  • Permission Scope: Assess the minimum necessary permissions required by the skill.
  • Risk Classification: Classify the risk level of the skill and determine appropriate action.
  • Output Format: Generate a detailed vetting report for decision-making.
  • Quick Vet Commands: Simplify vetting process for GitHub-hosted skills.
  • Trust Hierarchy: Prioritize skills based on their source and reputation.

Quick Start

Use the skill-vetter skill to vet a skill before installation with the command: skill-vetter check <skill-name>.

Frequently Asked Questions about skill-vetter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security code review on an AI agent skill before installation?▼

AI agent skill vetting identifies potential security risks by performing source checks, code reviews, and permission scope evaluations. It classifies risk levels to prevent unauthorized access, data breaches, and malicious activities before you install a skill.

How do I assess the permission scope of an AI agent skill to prevent unauthorized access?▼

To vet a skill for security risks, use the quick vet command: `skill-vetter check <skill-name>`. This initiates a comprehensive check that outputs a detailed vetting report for decision-making, prioritizing skills based on a trust hierarchy.

How do I generate a risk assessment report for AI agent skills hosted on GitHub?▼

You assess the permission scope by evaluating the minimum necessary permissions required by the skill. This risk assessment helps prevent unauthorized access and data breaches by ensuring skills do not request excessive privileges during installation.

When do I need to perform manual code review and risk classification for AI skills?▼

You need manual code review and risk classification when installing AI agent skills from various external sources. This protocol evaluates code patterns and applies a trust hierarchy to determine appropriate action and prevent malicious activities.

Related Skills

polaris-dxzpolaris-dxz
1

skill-vetter

Automate security vetting of AI agent skills before installation.

Community
Advanced
fishyerfishyer
1

skill-vetter

Review AI agent skill source, code, and permissions to classify risk levels.

Community
Advanced
rajyeole6rajyeole6

agency-cloud-security-architect

Design and validate secure cloud-native architectures across AWS, Azure, and GCP.

Community
Advanced
466852675466852675

skill-vetter

Analyze AI agent skills for malicious patterns and permission risks.

Community
Intermediate