{"id":"ecd71474-8285-458d-8064-2fa23d7922f8","slug":"clawhub-asterisk622-xiaoding-skill-vetter","name":"Skill Vetter","description":"Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...","canonicalUrl":"https://www.xpersona.co/agent/clawhub-asterisk622-xiaoding-skill-vetter","sourceUrl":"https://clawhub.ai/asterisk622/xiaoding-skill-vetter","homepage":"https://clawhub.ai/asterisk622/skills/xiaoding-skill-vetter","source":"CLAWHUB","vendor":{"slug":"clawhub","label":"Clawhub","url":"https://clawhub.ai/asterisk622/skills/xiaoding-skill-vetter"},"protocols":["OPENCLEW"],"capabilities":[],"trustScore":null,"trustConfidence":"unknown","artifactCount":0,"benchmarkCount":0,"lastRelease":"1.0.3","freshnessAt":"2026-10-09T05:55:46.750Z","freshnessLabel":"Oct 9, 2026","securityReviewed":true,"openapiReady":false,"stats":[{"label":"Trust score","value":"Unknown"},{"label":"Compatibility","value":"OpenClaw"},{"label":"Freshness","value":"Oct 9, 2026"},{"label":"Vendor","value":"Clawhub"},{"label":"Artifacts","value":"0"},{"label":"Benchmarks","value":"0"},{"label":"Last release","value":"1.0.3"}],"factsPreview":[{"factKey":"vendor","category":"vendor","label":"Vendor","value":"Clawhub","href":"https://clawhub.ai/asterisk622/skills/xiaoding-skill-vetter","sourceUrl":"https://clawhub.ai/asterisk622/skills/xiaoding-skill-vetter","sourceType":"profile","confidence":"medium","observedAt":"2026-10-09T05:55:46.750Z","isPublic":true},{"factKey":"protocols","category":"compatibility","label":"Protocol compatibility","value":"OpenClaw","href":"https://www.xpersona.co/api/v1/agents/clawhub-asterisk622-xiaoding-skill-vetter/contract","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-asterisk622-xiaoding-skill-vetter/contract","sourceType":"contract","confidence":"medium","observedAt":"2026-10-09T05:55:46.750Z","isPublic":true},{"factKey":"traction","category":"adoption","label":"Adoption signal","value":"4.2K downloads","href":"https://clawhub.ai/asterisk622/xiaoding-skill-vetter","sourceUrl":"https://clawhub.ai/asterisk622/xiaoding-skill-vetter","sourceType":"profile","confidence":"medium","observedAt":"2026-10-09T05:55:46.750Z","isPublic":true},{"factKey":"latest_release","category":"release","label":"Latest release","value":"1.0.3","href":"https://clawhub.ai/asterisk622/xiaoding-skill-vetter","sourceUrl":"https://clawhub.ai/asterisk622/xiaoding-skill-vetter","sourceType":"release","confidence":"medium","observedAt":"2026-04-08T07:03:54.632Z","isPublic":true},{"factKey":"handshake_status","category":"security","label":"Handshake status","value":"UNKNOWN","href":"https://www.xpersona.co/api/v1/agents/clawhub-asterisk622-xiaoding-skill-vetter/trust","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-asterisk622-xiaoding-skill-vetter/trust","sourceType":"trust","confidence":"medium","observedAt":null,"isPublic":true}],"highlights":["4.2K downloads","Trust evidence available"],"agentCard":{"name":"Skill Vetter","description":"Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...","source":"CLAWHUB","sourceId":"clawhub:s173mcfqgv1rmb5wmeby2t2cfs83g23w:xiaoding-skill-vetter","homepage":"https://clawhub.ai/asterisk622/skills/xiaoding-skill-vetter","repository":"https://clawhub.ai/asterisk622/xiaoding-skill-vetter","documentation":"https://www.xpersona.co/agent/clawhub-asterisk622-xiaoding-skill-vetter","protocols":["OPENCLEW"],"examples":[{"kind":"example","language":"text","snippet":"Questions to answer:\n- [ ] Where did this skill come from?\n- [ ] Is the author known/reputable?\n- [ ] How many downloads/stars does it have?\n- [ ] When was it last updated?\n- [ ] Are there reviews from other agents?"},{"kind":"example","language":"text","snippet":"🚨 REJECT IMMEDIATELY IF YOU SEE:\n─────────────────────────────────────────\n• curl/wget to unknown URLs\n• Sends data to external servers\n• Requests credentials/tokens/API keys\n• Reads ~/.ssh, ~/.aws, ~/.config without clear reason\n• Accesses MEMORY.md, USER.md, SOUL.md, IDENTITY.md\n• Uses base64 decode on anything\n• Uses eval() or exec() with external input\n• Modifies system files outside workspace\n• Installs packages without listing them\n• Network calls to IPs instead of domains\n• Obfuscated code (compressed, encoded, minified)\n• Requests elevated/sudo permissions\n• Accesses browser cookies/sessions\n• Touches credential files\n─────────────────────────────────────────"}]}}