Skill Vetter Runtime
Review ClawHub or local Skill packages before installation, classify risk, and return a structured security report.
Install
$ agentstack add skill-uvwt-agentdock-skill-vetter-runtime ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Links to your public security report.[](https://agentstack.voostack.com/security/report/skill-uvwt-agentdock-skill-vetter-runtime) Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Skill Vetter
This Skill provides a security-first review workflow and an optional helper script for inspecting ClawHub slugs or local Skill directories.
Use it before installing unknown skills, when comparing candidate skills, or when checking whether a local Skill has suspicious code, broad permissions, credential access, persistence hooks, or risky network behavior.
The output is a structured JSON report with reviewed files, detected red flags, permission clues, risk level, verdict, and notes.
辅助脚本执行
Skill 本体是本说明文档。确需调用包内辅助脚本时，在 Skill 包根目录使用相对路径执行；运行宿主负责切换到包根目录并把所需变量注入当前子进程。
printf '%s' '{"skill_action":""}' | python3 run.py输入必须是 JSON 对象。写操作仍按本文档中的确认规则执行。
| 动作 | 用途 | |---|---| | status | Check Python runtime and optional ClawHub CLI availability. | | vet-clawhub-slug | Fetch and vet a ClawHub skill by slug without installing it. | | vet-local-path | Vet a local skill folder. By default only AgentDock workspace and installed skill roots are allowed. |
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: uvwt
- Source: uvwt/agentdock
- License: Apache-2.0
- Homepage: https://uvwt.github.io/agentdock-docs/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.