skill-vetter

Assess AI skill origin, safety, and compliance before installation.

869|203|Updated May 7, 2026
One-click install
npx skills add https://github.com/freestylefly/wesight --skill skill-vetter-freestylefly
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: skill-vetter
Source: https://github.com/freestylefly/wesight/tree/main/SKILLs/skill-vetter
Command: npx skills add https://github.com/freestylefly/wesight --skill skill-vetter-freestylefly

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security-first vetting ensures that AI skills are safe to install by systematically checking for sources, safety concerns, and potential risks before they ever run in your environment.

Core Features & Use Cases

  • Source checks: Verify origin, author reputation, update history, and community trust before installation.
  • Code review (mandatory): Inspect all skill files for red flags and risky patterns before execution.
  • Permission scope assessment: Evaluate required file access, network access, and commands to ensure minimal and necessary privileges.
  • Risk classification & reporting: Produce a structured vetting report with risk levels and actionable verdicts to guide decisions.
  • Use case: Vet a newly downloaded skill from GitHub before enabling it in your agent workspace.

Quick Start

Run the vetting workflow on a new skill before installation and generate a comprehensive report.

Frequently Asked Questions about skill-vetter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I vet AI skills for security risks before installation?▼

Vetting AI skills for security risks requires systematic source checks, mandatory code reviews for risky patterns, and permission-scope evaluation before execution. This workflow produces a structured report with risk classifications and actionable verdicts to guide installation decisions.

What is AI skill safety vetting and when do I need it?▼

AI skill safety vetting is the process of identifying origin, safety, and compliance issues before running new skills in your environment. You need it whenever downloading or installing third-party agent skills, such as new tools sourced from community repositories.

How to assess permission scope and file access for downloaded agent skills?▼

Assess permission scope by evaluating required file access, network access, and commands to ensure minimal and necessary privileges. This assessment is a core part of the vetting workflow, examining skill content to determine if requested access levels are justified.

Does the vetting process check author reputation and update history?▼

Yes, the vetting process performs source checks that verify origin, author reputation, update history, and community trust before installation. This ensures the AI skill comes from a reliable source and has been maintained properly over time.

What is the best way to detect red flags in AI skill code?▼

The best way to detect red flags in AI skill code is through a mandatory code review that inspects all skill files for risky patterns before execution. This workflow satisfies the detection of red flags and produces explicit risk classifications for decision making.