Vet Repo
Scan repository agent configuration files for known malicious patterns Skill: Vet Repo Owner: ItsNishi Summary: Scan repository agent configuration files for known malicious patterns Tags: latest:1.0.0, security:1.0.0 Version history: v1.0.0 | 2026-02-07T23:20:25.234Z | user Initial release: scan repository agent configurations for malicious patterns. - Detects issues in .claude/settings.json, skill configs, .mcp.json, and agent-related README files. - Produces structured reports with s
Rank
62
Safety
84
Downloads
720
Updated
Apr 15, 2026
Version
1.0.0
Source
CLAWHUB
About
What it does, and when to use it.
Capability contract not published. No trust telemetry is available yet. 720 downloads reported by the source. Last updated 4/15/2026.
Avoid when
- Contract metadata is missing or unavailable for deterministic execution.
Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing
Public facts
Every fact links back to the source it came from.
- Vendor
- Clawhubvendor · observed Apr 15, 2026
- Protocol compatibility
- OpenClawcompatibility · observed Apr 15, 2026
- Adoption signal
- 720 downloadsadoption · observed Apr 15, 2026
- Latest release
- 1.0.0release · observed Feb 7, 2026
- Handshake status
- UNKNOWNsecurity
Install and run
Setup complexity: medium.
clawhub skill install kn7c4x4srjpbhtjhec7q71202n80phmw:vet-repo- Setup complexity is MEDIUM. Standard integration tests and API key provisioning are required before connecting this to production workloads.
- Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.
Contract: missing
curl -s "https://www.xpersona.co/api/v1/agents/clawhub-itsnishi-vet-repo/snapshot"
Documentation
CLAWHUB
2,336 characters of source documentation, loaded on request.
Extracted files
2 files captured from the source.
SKILL.md
--- name: vet-repo description: Scan repository agent configuration files for known malicious patterns disable-model-invocation: true allowed-tools: Read, Glob, Grep, Bash context: fork --- # vet-repo -- Repository Agent Config Scanner Scan all agent configuration files in a repository for known malicious patterns. Use this when entering an unfamiliar codebase to assess agent-level security risks before trusting the repo's configurations. ## What to do Run the scanner script against the current project root: ```bash python3 "$SKILL_DIR/scripts/vet_repo.py" "$PROJECT_ROOT" ``` Where `$SKILL_DIR` is the directory containing this SKILL.md, and `$PROJECT_ROOT` is the root of the repository being scanned. ## What it scans - `.claude/settings.json` -- hook configs (auto-approve, stop loops, env persistence) - `.claude/skills/` -- all SKILL.md files (hidden comments, curl|bash, persistence triggers) - `.mcp.json` -- MCP server configs (unknown URLs, env var expansion, broad tools) - `CLAUDE.md` / `.claude/CLAUDE.md` -- instruction injection in project config ## Output Structured report with findings grouped by severity (CRITICAL, HIGH, MEDIUM, LOW, INFO) and actionable recommendations for each finding. ## When to use - Before trusting a cloned repository's agent configurations - After pulling changes that modify `.claude/` or `.mcp.json` - As part of a security review of any codebase with agent integration
_meta.json
{
"ownerId": "kn7c4x4srjpbhtjhec7q71202n80phmw",
"slug": "vet-repo",
"version": "1.0.0",
"publishedAt": 1770506425234
}AionUi
Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!
activepieces
AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents
cherry-studio
AI productivity studio with smart chat, autonomous agents, and 300+ assistants.
CopilotKit
The Frontend for Agents & Generative UI. React + Angular
Machine-readable data
The same record, as JSON, for agents and crawlers.
{
"facts": [
{
"factKey": "vendor",
"category": "vendor",
"label": "Vendor",
"value": "Clawhub",
"href": "https://clawhub.ai/ItsNishi/vet-repo",
"sourceUrl": "https://clawhub.ai/ItsNishi/vet-repo",
"sourceType": "profile",
"confidence": "medium",
"observedAt": "2026-04-15T00:45:39.800Z",
"isPublic": true
},
{
"factKey": "protocols",
"category": "compatibility",
"label": "Protocol compatibility",
"value": "OpenClaw",
"href": "https://www.xpersona.co/api/v1/agents/clawhub-itsnishi-vet-repo/contract",
"sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-itsnishi-vet-repo/contract",
"sourceType": "contract",
"confidence": "medium",
"observedAt": "2026-04-15T00:45:39.800Z",
"isPublic": true
},
{
"factKey": "traction",
"category": "adoption",
"label": "Adoption signal",
"value": "720 downloads",
"href": "https://clawhub.ai/ItsNishi/vet-repo",
"sourceUrl": "https://clawhub.ai/ItsNishi/vet-repo",
"sourceType": "profile",
"confidence": "medium",
"observedAt": "2026-04-15T00:45:39.800Z",
"isPublic": true
},
{
"factKey": "latest_release",
"category": "release",
"label": "Latest release",
"value": "1.0.0",
"href": "https://clawhub.ai/ItsNishi/vet-repo",
"sourceUrl": "https://clawhub.ai/ItsNishi/vet-repo",
"sourceType": "release",
"confidence": "medium",
"observedAt": "2026-02-07T23:20:25.234Z",
"isPublic": true
},
{
"factKey": "handshake_status",
"category": "security",
"label": "Handshake status",
"value": "UNKNOWN",
"href": "https://www.xpersona.co/api/v1/agents/clawhub-itsnishi-vet-repo/trust",
"sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-itsnishi-vet-repo/trust",
"sourceType": "trust",
"confidence": "medium",
"observedAt": null,
"isPublic": true
}
],
"events": [
{
"eventType": "release",
"title": "Release 1.0.0",
"description": "Initial release: scan repository agent configurations for malicious patterns. - Detects issues in `.claude/settings.json`, skill configs, `.mcp.json`, and agent-related README files. - Produces structured reports with severity levels and actionable recommendations. - Designed for security reviews before trusting or updating repos with agent integrations.",
"href": "https://clawhub.ai/ItsNishi/vet-repo",
"sourceUrl": "https://clawhub.ai/ItsNishi/vet-repo",
"sourceType": "release",
"confidence": "medium",
"observedAt": "2026-02-07T23:20:25.234Z",
"isPublic": true
}
]
}Record generated Oct 10, 2026.