Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Initial release of skill-vetter: a security-first vetting protocol for AI agent skills. - Provides a step-by-step protocol to vet skills before installation, including source check, code review, and permission scope evaluation. - Lists explicit security “red flags” for immediate rejection. - Outlines a clear risk classification system with recommended actions. - Includes a standardized vetting report template for documentation. - Offers quick vetting commands for GitHub-hosted skills and a trust hierarchy guide.