Assess security and compliance risks in OpenClaw skills before installation.
npx skills add https://github.com/xfs96192/claude-config --skill skill-vetter-xfs96192
Please help me install this Agent Skill. Skill: skill-vetter Source: https://github.com/xfs96192/claude-config/tree/main/skills/skill-vetter Command: npx skills add https://github.com/xfs96192/claude-config --skill skill-vetter-xfs96192
Security-first vetting for OpenClaw skills. Use before installing any skill from ClawHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
Run the vetting protocol on a new skill before installation to decide whether to approve or block.
High-intent search queries and answers about installing and using this skill.
To audit OpenClaw skills for security risks, run a vetting protocol that checks metadata validation, permission scope, and content for red flags to generate a structured risk assessment report.
Permission scope analysis for skill vetting evaluates each requested permission within a skill to determine its necessity and potential risk, ensuring compliance before you approve the installation.
Check for prompt injection in ClawHub skills by performing a content review that scans the SKILL.md body for red flags, suspicious patterns, and potential security threats before installation.
Run a security audit on installed OpenClaw skills during pre-install vetting for new additions and periodically for existing ones to continuously assess compliance risks and permission scopes.
The skill vetting process works with skills from ClawHub, GitHub, and other sources by applying metadata validation, permission scope analysis, and content review to produce an audit-ready risk report.
pkkingExtract structured SKILL.md files from documentation, codebases, and GitHub repositories.
MohabsmarVet AI skills from ClawdHub and GitHub for source credibility, code integrity, and permission scopes.
LerianStudioAutomate infrastructure security audits with phased scanning and compliance mapping.
QcasaresScan OpenBot/Clawdbot skills for security vulnerabilities using Python scripts and regex patterns.
