skill-vetter
Pre-install security vetting for OpenClaw skills using a structured red-flag checklist.
What it does
- Before installing a new skill from ClawHub
- When reviewing a SKILL.md from GitHub or other sources
- When someone shares a skill file and you need to assess its safety
- During periodic audits of already-installed skills
- [ ] name matches the expected skill name (no typosquatting)
- [ ] version follows semver
- [ ] description is clear and matches what the skill actually does
Requirements & configuration
- When someone shares a skill file and you need to assess its safety
- 5. New skills from unknown authors (lowest trust — require full vetting)
Derived from the skill's own SKILL.md documentation · extracted 2026-07-23
Pre-install security vetting for OpenClaw skills using a structured red-flag checklist.
Source
Repository: https://github.com/useai-pro/openclaw-skills-security
skill-vetter FAQ
What does the skill-vetter skill do?
Security-first vetting for OpenClaw skills. Use before installing any skill from ClawHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns. Before installing a new skill from ClawHub When reviewing a SKILL.md from GitHub or other sources
What does skill-vetter require?
When someone shares a skill file and you need to assess its safety 5. New skills from unknown authors (lowest trust — require full vetting)
How do I install skill-vetter?
Run: npx -y skills add https://github.com/useai-pro/openclaw-skills-security --skill skill-vetter --agent claude-code — the source lives at github.com/useai-pro/openclaw-skills-security.
Maintain skill-vetter?
Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.
[](https://getagentictools.com/skills/useai-pro-openclaw-skills-security-skill-vetter?ref=badge) npx agentictools info skills/useai-pro-openclaw-skills-security-skill-vetter The second line is the CLI lookup for this page — handy in READMEs and docs.
Related skills
firestore-security-rules-auditor Automated security auditor for Firestore rules using red-team methodology and structured scoring.
clerk Intelligent router that directs authentication tasks to specialized Clerk skills based on your framework and use case.
best-practices Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practice…
security-requirement-extraction Transform threat analysis into actionable security requirements.
nestjs-best-practices 40 NestJS best practices organized by priority across architecture, dependency injection, security, and performance.
insforge Client-side SDK for database queries, authentication, file uploads, AI features, real-time messaging, and edge function invocatio…