技能安全审查
skill-vetter · 智能体基建 · AI 工具超市官方 · v0.0.101
面向技能使用者，安装前按红旗清单审查来源与权限范围，输出可安装或拦截的手动审查结论。
这个技能能做什么
- 核对技能来源与作者可信度
- 审查文件读写与联网权限
- 识别可疑指令与危险模式
- 给出安装或拦截建议
什么时候用
- 从外部渠道拿到技能想先查安全性
- 担心技能会读取本地文件或私自联网时
什么时候别用
审查自己完全可控的自研技能时不必走这套流程
适用场景与行业
配合这些工具用
- Claude Code
- 豆包
怎么安装
在技能超市搜索 skill-vetter 一键安装；也可在 AI 助手里直接说「安装 skill-vetter 技能」
来源：https://skill.accio.com/skills/phoenix/official/0.0.101/skill-vetter.zip
原始英文描述（未经改写）
Security-first vetting for OpenClaw skills. Use before installing any skill from ClawHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns. short-description: Run a legacy deep-vetting checklist before installing an OpenClaw skill from any source. why: Preserve a conservative review path for operators who want a manual-first audit flow. what: Provides a legacy pre-install security vetting module for skill review and comparison. how: Uses a structured red-flag checklist focused on permissions, patterns, and suspicious instructions. results: Produces a conservative manual review output for install-or-block decisions. version: 1.0.0 updated: '2026-03-10T03:42:30Z' jtbd-1: When I want a simple manual-first checklist to vet a skill before install. audit: kind: module author: useclawpro category: Security trust-score: 97 last-audited: '2026-02-01' permissions: file-read: true file-write: false network: false shell: false
