skill-vetter

Inspect AI skill sources, review code, and classify risks before installation.

2|Updated Mar 21, 2026

Search Tags:#security #compliance #trust #risk-assessment #code-review #vetting

Ready to run

npx skills add https://github.com/Throokie/claude-code-skills --skill skill-vetter-throokie

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: skill-vetter
Source: https://github.com/Throokie/claude-code-skills/tree/main/skills/skill-vetter
Command: npx skills add https://github.com/Throokie/claude-code-skills --skill skill-vetter-throokie

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security-focused vetting of AI skills before installation ensures risky code, data exfiltration, or unsafe behavior are detected prior to deployment.

Core Features & Use Cases

Source Check: verify origin, author reputation, and update history.
Mandatory Code Review: perform a line-by-line review and identify red flags.
Permission Scope Analysis: evaluate read/write/file access, network calls, and runtime privileges.
Risk Classification & Reporting: categorize risk levels and generate a consumable report for decision makers.
Use Cases: vet skills from ClawdHub, GitHub, or unknown sources prior to integration in trusted environments.

Quick Start

Inspect the source, complete the mandatory code review, assess permissions, and generate a risk report before installation.

Frequently Asked Questions about skill-vetter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I vet AI skills for security risks before installation?▼

To vet AI skills for security risks before installation, perform source verification, mandatory line-by-line code review, permission scope analysis, and risk classification to identify data exfiltration or unsafe behavior.

What is permission scope analysis for code review?▼

Permission scope analysis for code review evaluates read, write, and file access along with network calls and runtime privileges to identify potential data exfiltration or unsafe behavior in AI skills before deployment.

How do I assess the author reputation and source of GitHub or ClawdHub skills?▼

Assess author reputation and source of GitHub or ClawdHub skills by verifying origin, checking update history, and performing a mandatory code review to detect risky code prior to integration in trusted environments.

Can I generate a risk assessment report for AI skills across deployment pipelines?▼

Yes, you can generate a risk assessment report for AI skills across deployment pipelines by categorizing risk levels and producing a structured vetting report for decision makers after completing source verification and code review.

Does skill vetting work for unknown sources in development environments?▼

Skill vetting works for unknown sources in development environments by applying a multi-step vetting protocol that verifies origin, analyzes permission scope, and classifies risks before installation.

What are the limitations of relying on automated risk classification for AI skills?▼

Risk classification for AI skills generates a structured report for decision makers but should be combined with mandatory line-by-line code review, as automated classification alone may miss nuanced red flags or complex data exfiltration techniques.