Vet AI skills for security risks, permissions, and suspicious code patterns.
npx skills add https://github.com/steven508508/Sydney --skill skill-vetter-steven508508
Please help me install this Agent Skill. Skill: skill-vetter Source: https://github.com/steven508508/Sydney/tree/main/skills/skill-vetter Command: npx skills add https://github.com/steven508508/Sydney --skill skill-vetter-steven508508
This Skill ensures the security and safety of AI agents by thoroughly vetting skills before installation, checking for potential risks and vulnerabilities.
Run 'vet skill skill-name' to vet an AI skill named 'skill-name'.
High-intent search queries and answers about installing and using this skill.
To check an AI skill for security risks before installing, you can vet the skill's codebase, configuration, and network behavior to identify red flags, permission scopes, and suspicious code patterns.
AI skill vetting is a security-first review process that assesses source reputation, code integrity, and network or file access permissions. You need it before installing any skill from sources like ClawdHub or GitHub to ensure safety.
You review AI agent permissions by performing a permission scope analysis on the skill's configuration and network behavior, evaluating its file and network access requirements to classify potential risk levels.
Yes, you can vet AI skills from GitHub, ClawdHub, or other sources by validating the source reputation and analyzing the skill's codebase for potential security vulnerabilities and suspicious patterns.
The best way to assess code integrity for AI agent plugins is through a code review protocol that checks for security risks and suspicious patterns while verifying the source reputation of the skill.
To classify the risk level of an AI skill, analyze its network behavior, file access permissions, and code integrity to categorize the overall threat based on its observed actions and permissions.
khapn-2933Convert entire code repositories into XML, Markdown, plain text, or JSON.
djacobsmeyerConfigure Claude Code sandbox policies in settings.json for secure code execution.
usermaumDetect security vulnerabilities in code changes using CWE and STRIDE methodologies.
MesteriisReview build supply chains for security and integrity risks.
