Clawhub Skill Vetting
Vet ClawHub skills before installation. Use when the user asks about evaluating, auditing, or safely installing OpenClaw/ClawHub skills, or when a skill’s trustworthiness is in question.
- Skill ID
- hugomrtz/skill-vetting-clawhub/clawhub-skill-vetting
- Publisher
- hugomrtz
- Repository
- skill-vetting-clawhub
- Installs
- 0
- Files
- 3
- Synced
- Sep 23, 2026
Open any RiverX project, open the Skills panel in the chat, and search for this identifier. The files are fetched from the source repository at install time.
hugomrtz/skill-vetting-clawhub/clawhub-skill-vettingInstalls these files- README.md
- SKILL.md
- references/vetting-guide.md
What this skill tells the agent
ClawHub Skill Vetting
Overview
Apply a strict, security‑first vetting workflow before installing any ClawHub skill. Prioritize code review, permission scope, domain listing, and risk scoring.
Workflow
- Source check — author reputation, stars/downloads, last update, reviews.
- Code review (MANDATORY) — scan all files for exfiltration, secrets access,
eval/exec, obfuscation. - Permission scope — files, commands, network; confirm minimal scope.
- Recent activity — detect suspicious bursts.
- Community check — Discord/GitHub Discussions.
- Install safely — sandbox + inspect permissions.
Reference
Use `references/vetting-guide.md` for the full checklist, commands, red flags, confidence scoring, and report template.
Output expectations
- Produce the SKILL VETTING REPORT format.
- Provide a go/no‑go recommendation with reasons.
- If unclear, recommend sandbox install only or reject.
- Call out any red flags explicitly.
- Include a confidence score and threshold.
Use this skill in a project
Open any RiverX project, search the Skills panel for hugomrtz/skill-vetting-clawhub/clawhub-skill-vetting, and install it in one click.