skill-vetter-2自动扫描 workspace/skills 目录中多种文件，识别风险关键词，生成安全审计报告并给出安装建议。
Install via ClawdBot CLI:
clawdbot install tlcyqj2023/skill-vetter-2Grade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
/etc/passwdPotentially destructive shell commands in tool definitions
eval(AI Analysis
This skill is a security auditing tool designed to scan other skills for vulnerabilities. It operates in read-only mode on a local directory and does not send data externally. The flagged signals are part of its detection logic for identifying malicious patterns in other files, not its own execution.
Audited Apr 16, 2026 · audit v1.0
Generated May 6, 2026
在CI/CD流程中集成该技能，每次新技能包提交时自动执行安全扫描，生成风险报告并决定是否允许合并。适用于团队协作开发AI技能的场景，确保代码安全。
企业内部技能商店管理员定期使用该技能批量审核所有已上架或待上架技能，根据风险评分进行分级管理，高风险技能禁止安装。适用于金融、医疗等安全敏感行业。
开源社区或技能市场平台利用该技能自动扫描用户上传的技能包，提供风险评分和安装建议，帮助用户做出知情决策，维护平台安全性。
个人开发者开发技能后，使用该技能自动扫描自己的代码，发现潜在安全风险并改进，避免发布包含高危操作的技能。
提供云上的自动化安全审计服务，按扫描文件数或订阅周期收费。企业集成该技能到DevOps流水线，减少人工审核成本。
基于该技能生成的审计报告，提供人工深度分析和合规建议，帮助客户满足行业安全标准。适用于高合规要求行业。
将技能打包成企业私有化部署版本，一次性授权费用加年度维护费，企业可在内网独立使用，保护代码隐私。
💬 Integration Tip
集成时只需将技能包放入workspace/skills目录，触发关键词即可自动运行，无需额外配置。若需持续监控，可设置定时任务或Webhook。
Scored Jul 1, 2026
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
GEO Audit — AI Search Visibility Checker for ChatGPT, Perplexity, Claude & Gemini. 29-point GEO readiness checklist: robots.txt AI crawler access, Index...
Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot...