vet-repoScan repository agent configuration files for known malicious patterns
Install via ClawdBot CLI:
clawdbot install itsnishi/vet-repoGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
/etc/passwdPotentially destructive shell commands in tool definitions
eval(Audited Apr 17, 2026 · audit v1.0
Generated Mar 22, 2026
Developers cloning a new open source repository can use vet-repo to automatically scan for malicious agent configurations before running any local agents. This prevents accidental execution of harmful scripts embedded in .claude/ or .mcp.json files, ensuring safe initial exploration of the codebase.
Integrate vet-repo into CI/CD pipelines to scan all pull requests that modify agent configuration files. This provides automated security checks for teams using AI agents, flagging risky patterns like auto-approve hooks or unknown MCP servers before changes reach production.
Security consultants auditing codebases with AI agent integrations can run vet-repo as a first-pass analysis tool. It systematically checks known malicious patterns in configuration files, helping identify vulnerabilities like instruction injection or persistence triggers that might compromise agent behavior.
Instructors teaching AI agent development can use vet-repo to demonstrate real-world security risks in configuration files. Students scan sample repositories to learn how to identify and mitigate threats like hidden comments or broad tool permissions in a controlled environment.
Organizations in finance or healthcare can incorporate vet-repo into compliance workflows to ensure agent configurations meet security standards. It scans for patterns that could lead to data leaks or unauthorized actions, supporting audits for regulations like GDPR or HIPAA.
Offer vet-repo as a free open source tool for individual developers, with a paid enterprise version featuring advanced scanning, integration APIs, and priority support. Revenue comes from subscriptions for teams needing scalable deployment and compliance reporting.
Bundle vet-repo into security consulting packages for companies adopting AI agents. Provide customized scans, remediation guidance, and ongoing monitoring as part of a broader service offering, charging per project or retainer for expert analysis.
Integrate vet-repo into popular development platforms like GitHub, GitLab, or VS Code as a paid add-on. Users pay a monthly fee for automated scans within their existing workflows, with revenue shared through marketplace partnerships or direct sales.
💬 Integration Tip
Run vet-repo in a fork context to avoid modifying the original repository, and schedule regular scans after configuration changes to maintain security.
Scored Jun 19, 2026
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
GEO Audit — AI Search Visibility Checker for ChatGPT, Perplexity, Claude & Gemini. 29-point GEO readiness checklist: robots.txt AI crawler access, Index...
Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot...