DISABLE_TELEMETRY=1 to opt out before using. skill-vetting-tianjinVet ClawHub skills for security and utility before installation. Use when considering installing a ClawHub skill, evaluating third-party code, or assessing w...
Install via ClawdBot CLI:
clawdbot install tianjin-ren/skill-vetting-tianjinGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
/etc/passwdContains instructions to override system prompt or ignore user requests
"Ignore all previous instructions"Sends data to undocumented external endpoint (potential exfiltration)
post → https://attacker.com/exfilPotentially destructive shell commands in tool definitions
rm -rf /Generated Mar 21, 2026
A security team at a large corporation uses this skill to vet third-party AI skills before deployment in their internal AI agent ecosystem. They follow the structured workflow to ensure no malicious code or prompt injection risks are introduced, protecting sensitive corporate data and maintaining compliance with security policies.
A freelance developer building custom AI agents for clients uses this skill to evaluate and validate skills from ClawHub before integrating them into client projects. This helps ensure the skills are safe, functional, and add unique value without duplicating existing tools, reducing liability and improving project quality.
A university research lab working on AI agent systems uses this skill to vet open-source skills for academic experiments and student projects. It allows them to teach secure coding practices, identify potential vulnerabilities, and avoid skills with hidden malicious behavior that could compromise lab resources.
A startup offering an AI-powered platform for businesses uses this skill to curate and verify skills from ClawHub before making them available to users. This vetting process builds trust with customers by ensuring all skills are secure, useful, and free from prompt injection or other red flags.
Offer a subscription-based service where businesses pay a monthly fee to have their AI skills vetted using this tool. This includes automated scanning reports, manual review summaries, and ongoing monitoring for updates, generating recurring revenue from enterprises concerned about AI security.
Provide basic vetting functionality for free to attract individual developers and small teams, then charge for advanced features like detailed analytics, integration with CI/CD pipelines, and priority support. This model drives adoption while monetizing power users and larger organizations.
Leverage the skill as a foundation for offering consulting services, such as custom security audits, training workshops on AI skill vetting, and development of tailored vetting workflows. This generates project-based revenue and builds long-term client relationships in high-demand security niches.
💬 Integration Tip
Integrate this skill into a CI/CD pipeline to automatically vet new skills before deployment, ensuring continuous security checks without manual intervention.
Scored Jun 17, 2026
Calls external URL not in known-safe list
https://clawhub.ai/api/v1/download?slug=SKILL_NAMEUses known external API (expected, informational)
api.github.comAI Analysis
The skill contains direct evidence of credential harvesting (/etc/passwd), prompt poisoning ('Ignore all previous instructions'), and data exfiltration to an attacker-controlled endpoint (https://attacker.com/exfil). These are active, high-severity attacks, not theoretical risks.
Audited Apr 16, 2026 · audit v1.0
Data analysis and visualization. Query databases, generate reports, automate spreadsheets, and turn raw data into clear, actionable insights. Use when (1) yo...
Data visualization, report generation, SQL queries, and spreadsheet automation. Transform your AI agent into a data-savvy analyst that turns raw data into actionable insights.
Analyze construction drawings to extract dimensions, annotations, symbols, and metadata. Support quantity takeoff and design review automation.
Automation skill for DELLIGHT Strategic Intelligence.
Automation skill for DELLIGHT Intelligence Operations.
云产品技术文档对比工具,自动抓取阿里云、华为云、AWS、腾讯云官方文档,生成结构化对比资料,辅助技术选型和学习