SuperAPI AI Directory
Partner with us中文AI newsFavorites
Skillsskill-vetter

skill-vetter

Agents & models

View repository

Updated 10-16 00:22

About this skill

Skill Vetter 🔒

Never install a skill without vetting it first.

When to Use

  • Before installing any skill from ClawHub, GitHub, or external sources
  • When evaluating skills shared by other agents

Step 1: Source Check

  • Where did it come from?
  • Author known/reputable?
  • Downloads/stars?
  • Last updated?

Step 2: Code Review (MANDATORY)

Read ALL files. Reject immediately if you see:

🚨 REJECT:
• curl/wget to unknown URLs
• Sends data to external servers
• Requests credentials/tokens/API keys
• Reads ~/.ssh, ~/.aws, ~/.config without reason
• Accesses MEMORY.md, USER.md, SOUL.md, IDENTITY.md
• base64 decode
• eval()/exec() with external input
• Modifies system files outside workspace
• Installs unlisted packages
• Network calls to IPs instead of domains
• Obfuscated/minified code
• Requests sudo
• Accesses browser cookies/sessions
• Touches credential files

Step 3: Permission Scope

  • Files read/written?
  • Commands run?
  • Network access? To where?
  • Scope minimal for stated purpose?

Step 4: Risk Classification

Level Examples Action
🟢 LOW Notes, weather, formatting Basic review, install OK
🟡 MEDIUM File ops, browser, APIs Full code review
🔴 HIGH Credentials, trading, system Human approval required
⛔ EXTREME Security configs, root Do NOT install

Output

SKILL VETTING REPORT
═══════════════════════
Skill: [name] | Source: [origin] | Author: [name] | Version: [ver]
Metrics: [downloads/stars] | Updated: [date] | Files: [count]
Red Flags: [None / list]
Permissions: Files: [list] | Network: [list] | Commands: [list]
Risk: [🟢/🟡/🔴/⛔]
Verdict: [✅ SAFE / ⚠️ CAUTION / ❌ DO NOT INSTALL]
Notes: [observations]
═══════════════════════

Quick Vet (GitHub)

curl -s "https://api.github.com/repos/OWNER/REPO" | jq '{stars: .stargazers_count, forks: .forks_count, updated: .updated_at}'
curl -s "https://api.github.com/repos/OWNER/REPO/contents/skills/SKILL_NAME" | jq '.[].name'

Trust Hierarchy

  1. Official OpenClaw → lower scrutiny (still review)
  2. High-star repos (1000+) → moderate
  3. Known authors → moderate
  4. Unknown sources → maximum
  5. Requesting credentials → human approval always

Completion Checklist

  • Source checked
  • All files read, red flags checked
  • Permission scope assessed
  • Risk level assigned
  • Verdict delivered

Unchecked = not done.

Paranoia is a feature. 🔒🦀

Credits

Originally by adamb0mbNZ — ClawHub.