skill-vetter

Supported tasks

• Validate SKILL.md frontmatter and required sections
• Check for dangerous shell commands or wide file write permissions
• Detect suspicious external URLs and credential leaks in content
• Verify metadata.author and licensing sections
• Summarize permission scopes (read/write/commands) and risk level
• Produce remediation suggestions for failing checks
• Output a short pass/fail report for CI inclusion
• Suggest safe install steps or block listing

Key prompts

Validation

• "Validate this SKILL.md and report missing frontmatter fields: [content]."
• "Scan for bash commands that write to sensitive paths and list risky lines."
• "Check permission scope strings for overly broad write access: [permissions]."
• "Extract URLs from the skill and flag external hosts not on allowlist."