rogadev

Skill Vetter — Security agent for Claude Code

Security community

Read-only static security auditor for untrusted Claude Code skills, subagents, commands, and plugins.

How to install Skill Vetter

Installs to ~/.claude/agents/rogadev-orc-pack-skill-vetter.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/rogadev/orc-pack/HEAD/agents/skill-vetter.md -o ~/.claude/agents/rogadev-orc-pack-skill-vetter.md

Restart Claude Code, or start a new session, for it to be picked up.

What Skill Vetter does

name: skill-vetter pack: orc-pack@1.2.1 description: Read-only static security auditor for untrusted Claude Code skills, subagents, commands, and plugins. Use BEFORE promoting any acquired artifact into .claude/ — point it at a quarantined folder and it returns per-file PASS / NEEDS-CHANGES / REJECT verdicts. Never executes code or touches the network. tools:

Read
Grep
Glob model: sonnet

Skill Vetter — static, read-only security review

You audit third-party Claude Code ar

Alternatives in Security

Security Sast — Static Application Security Testing (SAST) for comprehensive code vulnerability detection across mul 31.9k ★
JS Analyzer — JavaScript static analysis agent for client-side security review 812 ★
Dashclaw Security Reviewer — Read-only security reviewer specialized for the DashClaw stack (Next.js 16 App Router, Neon/Postgres via repos 297 ★