skill-vetter-zh安装任何 AI 智能体技能前的安全审查协议。检测凭据窃取、混淆代码、数据外泄等危险标志。风险分级：低危/中危/高危/极危。生成结构化审查报告。在未经审查的情况下，禁止安装任何来源不明的技能。
Install via ClawdBot CLI:
clawdbot install xocio/skill-vetter-zhGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
~/.ssh/id_rsaSends data to undocumented external endpoint (potential exfiltration)
POST → https://evil.com/stealPotentially destructive shell commands in tool definitions
eval(Calls external URL not in known-safe list
https://clawhub.comUsage Guide
Loading usage data… refresh in a few seconds.
Scored May 10, 2026
Uses known external API (expected, informational)
api.github.comAI Analysis
This skill is a security review protocol itself, not a skill that performs actions on user data. The flagged signals (credential access, data exfiltration) are part of its detection checklist, not its own behavior. The external API calls to github.com and clawhub.com are consistent with its stated purpose of fetching skill metadata for review. No obfuscation or hidden instructions were found.
Audited May 10, 2026 · audit v1.0
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
GEO Audit — AI Search Visibility Checker for ChatGPT, Perplexity, Claude & Gemini. 29-point GEO readiness checklist: robots.txt AI crawler access, Index...
Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot...