Skill Vetter - Revue de sécurité avant installation
/openclaw-skill-vetterProtocole de vérification de sécurité avant l’installation de tout skill d’agent IA. Détection des signaux d’alerte : vol d’identifiants, code obfusqué, exfiltration. Classification du risque L...
Skill créé par la communauté et référencé depuis ClawHub.
Source canonique: https://clawhub.ai/skills/openclaw-skill-vetter
Version: 1.0.0
Changelog source: Initial release of skill-vetter: protocol for securely vetting AI agent skills before installation. - Introduces structured security vetting process, including source verification, code review checklist, and permissions analysis. - Detects red flags such as credential theft patterns, obfuscated/minified code, data exfiltration, and risky system or network behaviors. - Classifies risk level as LOW, MEDIUM, HIGH, or EXTREME and produces detailed, markdown-friendly vetting reports. - Includes practical vetting checklists, report templates, and quick audit commands for both ClawHub and GitHub skills. - Strongly discourages installing unvetted or sketchy skills; emphasizes rigorous pre-installation checks.
