# Skill Vetter

> Security-first vetter for SKILL.md files — checks permissions, suspicious patterns, and metadata before installing or publishing skills. Useful for validating third-party skills for this repo.

- Skill: `tuanductran/skill-vetter` (Agent Skill)
- Install (CLI): `npx skillmds@latest add tuanductran/skill-vetter`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tuanductran/skill-vetter/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: tuanductran (https://skillmd.com/u/tuanductran)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tuanductran/skill-vetter

---


# Skill Vetter

## Supported tasks

- Validate SKILL.md frontmatter and required sections
- Check for dangerous shell commands or wide file write permissions
- Detect suspicious external URLs and credential leaks in content
- Detect hidden Unicode (zero-width characters, homoglyphs) used to hide
  injected instructions or spoof visible text
- Verify metadata.author and licensing sections
- Summarize permission scopes (read/write/commands) and risk level
- Produce remediation suggestions for failing checks
- Output a short pass/fail report for CI inclusion
- Suggest safe install steps or block listing

## Key prompts

### Validation

- "Validate this SKILL.md and report missing frontmatter fields: [content]."
- "Scan for bash commands that write to sensitive paths and list risky lines."
- "Check permission scope strings for overly broad write access: [permissions]."
- "Extract URLs from the skill and flag external hosts not on allowlist."
- "Scan this content for zero-width characters or homoglyphs that could hide instructions."

### Remediation

- "Suggest fixes to reduce permission scope for this SKILL.md: [content]."
- "Rewrite dangerous command snippets into safe alternatives or sandboxed commands."
- "Produce a CI step snippet that fails on high-risk vetter issues."
- "Generate a short advisories list for reviewers before merging this skill."

### Reporting

- "Produce a one-paragraph summary for maintainers explaining the vet result."
- "Create a Markdown checklist of vetter findings suitable for a PR comment."
- "Return a machine-readable JSON report with keys: passed, issues, severity."
- "Suggest whether to allow-install, require-review, or block-install based on findings."

## Tips

- Run vetter as part of `bun run validate` or a pre-merge CI job
- Keep an allowlist of approved external hosts and commands
- Fail fast on write permissions targeting root-level or repo-critical paths
- Surface minimal, actionable fixes for authors to correct their SKILL.md