Review external skill sources for red flags and permission gaps.
npx skills add https://github.com/RonaldJEN/OpenCapyBox --skill skill-vetter-ronaldjen
Please help me install this Agent Skill. Skill: skill-vetter Source: https://github.com/RonaldJEN/OpenCapyBox/tree/main/src/agent/skills/skill-vetter Command: npx skills add https://github.com/RonaldJEN/OpenCapyBox --skill skill-vetter-ronaldjen
Identify and mitigate security and safety risks before integrating new AI skills, preventing unsafe code, data leakage, or overreaching permissions.
Run the vetting workflow on a candidate skill repository to generate the Vetting Report.
High-intent search queries and answers about installing and using this skill.
To vet AI skills for security risks, you need to enforce mandatory code review and permission scope audits. This process identifies red flags, unsafe patterns, and overreaching permissions to prevent data leakage before integration.
Skill vetting is the process of evaluating source origin, authorship, and code to classify risks as low, medium, or high. You need a risk assessment when integrating external AI skills to minimize exposure from unverified runtime capabilities.
Review external skill source code by auditing required read/write access and network calls to detect permission gaps. This structured code review checks all skill files to identify unsafe patterns and overreaching runtime capabilities.
Yes, you can use automated vetting to check GitHub, ClawdHub, or other external skill sources for compliance. It evaluates origin reputation and applies risk classification to generate a structured vetting report for approval decisions.
An AI skill vetting report should include metrics, identified red flags, permission scope gaps, and a clear risk verdict. This structured output provides recommended remediation actions and can be shared with stakeholders for approval.
g-lokReview AI agent skills for security risks and generate a vetting report.
zhangyanbo2007Evaluate AI agent skills for source integrity, code safety, and permission scopes.
prof-danielcRun static analysis tools and aggregate results into a prioritized issue report.
Greenmamba29Monitor security audit logs and generate real-time alerts for unauthorized access.
