Security vetting protocol before installing any AI agent skill. Red flag detection for credential theft, obfuscated code, exfiltration. Risk classification L...
Initial release of skill-vetter: protocol for securely vetting AI agent skills before installation. - Introduces structured security vetting process, including source verification, code review checklist, and permissions analysis. - Detects red flags such as credential theft patterns, obfuscated/minified code, data exfiltration, and risky system or network behaviors. - Classifies risk level as LOW, MEDIUM, HIGH, or EXTREME and produces detailed, markdown-friendly vetting reports. - Includes practical vetting checklists, report templates, and quick audit commands for both ClawHub and GitHub skills. - Strongly discourages installing unvetted or sketchy skills; emphasizes rigorous pre-installation checks.