Skill Vetter
一个面向 Security 场景的 Agent 技能。原始说明:Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
name: skill-package-doctor
description: Audit Claude, Codex, OpenClaw, and ClawHub skill packages before publishing; produce concrete fix lists, trust scores, and shareable proof cards.
version: 0.1.1
homepage: https://clawhub.getgeofix.xyz/
license: MIT
user-invocable: true
metadata: {"openclaw":{"skillKey":"skill-package-doctor","requires":{"anyBins":["python3","python"]}}}
Use this skill when the user wants to review, debug, score, publish, or improve an agent skill package.
SKILL.md feels generic, unsafe, too broad, or hard to trust.SKILL.md.python3 scripts/skill_doctor.py /path/to/skill \
--json-out skill-doctor.json \
--markdown-out skill-doctor.md \
--svg-out skill-doctor.svg
references/source-manifest.json only when you need package provenance or release-surface context.SKILL.md frontmatter as the registry contract.When To Use trigger, an operating order, and a validation step.scripts/ and references/ must be mentioned in SKILL.md.Return:
publish-ready, ship-after-small-fixes, needs-work, or do-not-publishDo not recommend publishing when:
SKILL.md is missing frontmatter, name, or description