Is skills/skill-vetter safe?
Yes. skills/skill-vetter is safe to install. Oathe's behavioral security audit gave the skill-vetter skill by skills a trust score of 90/100 with 2 findings, none critical or high.
https://clawhub.ai/skills/skill-vetter
Is skills/skill-vetter safe to install?
This skill appears to be a legitimate security tool designed to help users vet other skills before installation. It provides comprehensive guidelines for identifying malicious skills and promotes security best practices, with only minor concerns about instructing external API calls to GitHub.
What security issues were found in skills/skill-vetter?
Category Scores
Findings (2)
MEDIUM External API Instructions -20 ▶
The skill instructs the agent to make curl requests to GitHub API endpoints for repository analysis. While these appear legitimate for gathering public repository information, they represent instructions to access external URLs which could potentially be misused.
LOW Network Activity During Installation -10 ▶
Standard network connections to GitHub API servers (216.150.1.1:443) observed during skill installation process. This is expected behavior for ClawHub skill installation.
Should I install skills/skill-vetter?
Oathe's verdict for skills/skill-vetter is SAFE with a trust score of 90/100. Recommendation: Install.