skill-vetter

Vet OpenClaw skills for security red flags and permission risks.

Updated Mar 15, 2026
One-click install
npx skills add https://github.com/wongdean/knowledge-base --skill skill-vetter-wongdean
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: skill-vetter
Source: https://github.com/wongdean/knowledge-base/tree/main/backups/openclaw-config/20260315_232439/workspace-skills/openclaw-skills-security/skills/skill-vetter
Command: npx skills add https://github.com/wongdean/knowledge-base --skill skill-vetter-wongdean

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill acts as a security auditor, meticulously vetting OpenClaw skills before installation to identify and mitigate potential risks.

Core Features & Use Cases

  • Pre-install Security Audit: Analyzes skill metadata, permissions, and code for suspicious patterns and red flags.
  • Risk Assessment: Assigns a trust score and provides a clear recommendation on whether to install, review further, or block a skill.
  • Use Case: Before installing a new skill from an unfamiliar source, run this vetting process to ensure it doesn't contain malicious code, attempt unauthorized access, or pose a security threat to your system.

Quick Start

Run a security vetting checklist on the skill located at '/path/to/new/skill.md'.

Frequently Asked Questions about skill-vetter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit an OpenClaw skill for malware before installing?

To assess OpenClaw skill safety, run a vetting process that performs metadata verification and permission risk assessment. It assigns a trust score and provides a clear recommendation on whether to install, review further, or block the skill.

What is a permission risk assessment for OpenClaw skills?

A permission risk assessment for OpenClaw skills analyzes the requested permission scopes to identify unauthorized access attempts. It checks for suspicious patterns and critical warnings to ensure the skill does not pose a security threat to your system.

How do I check an unfamiliar GitHub skill for typosquatting?

To check an unfamiliar GitHub skill for typosquatting, run a security-first vetting process that verifies metadata and detects typosquats. This identifies suspicious patterns and red flags to mitigate potential risks from unfamiliar sources.

Does the vetting process work on skills from ClawHub and GitHub?

No special environment setup is required. The vetting process operates directly on the skill file, analyzing metadata, permission scopes, and code content to identify malicious code, unauthorized access attempts, and suspicious patterns.

Can I get a trust score for a new OpenClaw skill before installation?

Yes, you can get a trust score for a new OpenClaw skill before installation. The vetting process assigns a trust score based on metadata verification, permission risk assessment, and content analysis, yielding a clear install or block recommendation.