Before you install any skill from ClawdHub or GitHub, run it through this vetter. It walks you through a four step protocol: checking the source and author reputation, scanning code for red flags like external network calls or credential access, evaluating permission scope, and assigning a risk level from low to extreme. The red flag list is comprehensive and paranoid in a good way, covering things like base64 decoding, obfuscated code, and unauthorized access to identity files. It outputs a structured report with a clear verdict: safe to install, install with caution, or do not install. Think of it as a security checklist that forces you to actually read the code before running it.

skills.sh installs
260
GitHub stars
674
last updated
Aug 21, 2026

Install

$ npx -y skills add sundial-org/awesome-openclaw-skills --skill skill-vetter --agent claude-code

Installs into .claude/skills of the current project.

Files

Skill Vetter 🔒

Security-first vetting protocol for AI agent skills. Never install a skill without vetting it first.

When to Use

  • Before installing any skill from ClawdHub
  • Before running skills from GitHub repos
  • When evaluating skills shared by other agents
  • Anytime you're asked to install unknown code

Vetting Protocol

Step 1: Source Check

Questions to answer:
- [ ] Where did this skill come from?
- [ ] Is the author known/reputable?
- [ ] How many downloads/stars does it have?
- [ ] When was it last updated?
- [ ] Are there reviews from other agents?

Step 2: Code Review (MANDATORY)

Read ALL files in the skill. Check for these RED FLAGS:

Sponsors

Details

Repository
github.com/sundial-org/awesome-openclaw-skills
Categories
Security, Git & Pull Requests
First seen
Jun 3, 2026

More from sundial-org/awesome-openclaw-skills

All 39

Recommended

More Security
1patricio0312rev avatardependency-doctorpatricio0312rev/skillsAudits project dependencies for outdated packages, duplicates, heavy/problematic libraries, security vulnerabilities, and risky version combinations. Generates 258skills.sh installs
2patricio0312rev avatarvscode-rest-client-generatorpatricio0312rev/skillsGenerates .http files for the VS Code REST Client extension from Express, Next.js, Fastify, or other API routes. Creates organized request files with variables,255skills.sh installs
3martinholovsky avatarcilium-expertmartinholovsky/claude-skills-generatorExpert in Cilium eBPF-based networking and security for Kubernetes. Use for CNI setup, network policies (L3/L4/L7), service mesh, Hubble observability, zero-tru251skills.sh installs
4davila7 avatarplaywright-e2e-builderdavila7/claude-code-templatesPlan and build comprehensive Playwright E2E test suites with Page Object Model, authentication state persistence, custom fixtures, visual regression, and CI int245skills.sh installs
5maxnorm avatarmagento-api-developermaxnorm/magento2-agent-skillsDesigns and implements REST and GraphQL APIs for Magento 2. Use when developing APIs, creating service contracts, building headless commerce solutions, or integ245skills.sh installs
6sickn33 avatarsecrets-managementsickn33/antigravity-awesome-skillssecrets management243skills.sh installs