Skill Vetter
- 71 installs
- 5k repo stars
- Updated August 4, 2026
- dtyq/magic
Vet a skill for safety before installing it from a skill market, skillhub or GitHub by checking red flags, permission scope and suspicious patterns.
About
skill-vetter is a security-first protocol for checking whether a skill is safe to install, run before pulling anything from a skill market, skillhub, GitHub or other source. It inspects red flags, permission scope and suspicious patterns and gives a safe-to-install verdict. A solo builder uses it as a gate so an agent does not blindly install untrusted third-party skills.
- Security-first vetting before installing a skill
- Flags red flags and suspicious patterns
- Reviews permission scope for safety
Skill Vetter by the numbers
- 71 all-time installs (skills.sh)
- Ranked #1,165 of 2,203 Security skills by installs in the Skillselion catalog
- Data as of Aug 5, 2026 (Skillselion catalog sync)
npx skills add https://github.com/dtyq/magic --skill skill-vetterAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 71 |
|---|---|
| repo stars | ★ 5k |
| Last updated | August 4, 2026 |
| Repository | dtyq/magic ↗ |
What it does
Vet a skill for safety before installing it from a skill market, skillhub or GitHub by checking red flags, permission scope and suspicious patterns.
Who is it for?
Screening third-party skills before install
Skip if: Authoring or packaging your own skills
Related skills
Entra App RegistrationCorrectly register an application in Microsoft Entra ID, configure OAuth 2.0 flows, request the right API permissions, and generate working MSAL authentication snippets484k1.3kAzure ComplianceRun automated Azure compliance scans, security posture checks, and Key Vault expiration audits before deploying.484k1.3k
Openclaw Secure Linux CloudDeploy and harden an OpenClaw agent instance on a Linux cloud server following battle-tested security defaults.270k72
Better Auth Best PracticesCorrectly configure Better Auth for secure authentication with database adapters, sessions, OAuth, email/password, and plugins in TypeScript projects.80.9k206
Firebase Security Rules AuditorAutomatically audit Firebase Firestore security rules for bypass vulnerabilities and logic gaps before deploying.80.4k397
Audit WebsiteRun comprehensive audits that surface SEO, performance, security, technical, and content issues with LLM-optimized reports and health scores.65.6k85