Scan ClawHub skill packages for security and utility risks.
npx skills add https://github.com/cncoder/oneclaw --skill skill-vetting
Please help me install this Agent Skill. Skill: skill-vetting Source: https://github.com/cncoder/oneclaw/tree/main/skills/skill-vetting Command: npx skills add https://github.com/cncoder/oneclaw --skill skill-vetting
Vet ClawHub skills for security and utility before installation to prevent unsafe code from being adopted and to ensure practical value.
Download the skill package to a temporary workspace, unzip it, and run the Python scanner to evaluate the skill.
High-intent search queries and answers about installing and using this skill.
Vetting ClawHub skills involves downloading the package to a temporary workspace, unzipping it, and running a Python scanner. The scanner applies automated security checks to generate a structured report, assessing prompt-injection risks, network activity, and file operations.
The vetting workflow combines automated checks and manual review to evaluate third-party skill packages. It scans for prompt-injection risks, network activity, and file operations, producing a structured report to confirm practical value and assess risk posture in your environment.
Yes, you can use the Python scanner to assess network activity and file operations. The guided vetting workflow applies automated checks against a defined rule set to evaluate these specific risks before you decide to install the skill package.
The skill vetting process requires no external dependencies to run. You simply download the skill package, unzip it to a temporary workspace, and execute the included Python scanner to evaluate security and utility without additional setup.
The best way to evaluate third-party skills for prompt-injection risks is using a guided vetting workflow with an automated Python scanner. It scans skill files against a defined rule set to identify injection risks and generate a structured report for go/no-go decisions.
BluebagAIPack and unpack ZIP archives while preserving folder structures.
anotbReview prompt-injection threat surfaces for GenAI systems in financial services.
AngelP17Automate CI/CD pipelines, infrastructure provisioning, and deployments across AWS, GCP, and Azure.
ovachieverIdentify ISMS compliance gaps through automated audit processes aligned with ISO 27001.
