Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
| Our verdict | Caution — Automated flags come from its own security-checklist text, not clear proof of those behaviors. Reviewed 2026-10-17 — owner-approved summary of automated scan; code not audited. |
|---|---|
| Author | spclaudehome unverified |
| Version / license | 1.0.0 · not stated in API · updated 2026-09-16 |
| Popularity | 277,673 downloads · 12,251 installs · 1,306 stars |
| Install | openclaw skills install @spclaudehome/skill-vetter |
| Declared requirements | name: skill-vetter version: 1.0.0 description: Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns. |
| Name collisions | 4 skills share this slug; install with owner prefix |
| ClawHub scan | No moderation record in API response unverified |
| Security reports | None found naming this skill unverified |
Automated text matches only. A match means the phrase appeared in SKILL.md; it can be harmless (docs, checklists, or “no API key required”). Nothing was executed.
| Pattern | Hits | First match |
|---|---|---|
| Mentions admin (sudo) commands | 1 | line 49: • Requests elevated/sudo permissions |
| Mentions credentials or API keys | 6 | line 40: • Requests credentials/tokens/API keys |
| Mentions paste-site or raw script hosts | 1 | line 118: curl -s "https://raw.githubusercontent.com/OWNER/REPO/main/skills/SKILL_NAME/SKILL.md" |
| Mentions agent memory/persona files | 2 | line 42: • Accesses MEMORY.md, USER.md, SOUL.md, IDENTITY.md |
Canonical listing: https://clawhub.ai/spclaudehome/skills/skill-vetter · data fetched 2026-10-17 00:49 PDT
A weekly, no-hype look at AI agents: which skills are safe to install, what agents really cost, and recipes that actually work.