Skill Vetter — Development skill for Claude Code
安装任何第三方 skill/plugin 之前的安全审查.
How to install Skill Vetter
Installs to ~/.claude/skills/mistprismlabs-open-mist-skill-vetter/SKILL.md
mkdir -p ~/.claude/skills/mistprismlabs-open-mist-skill-vetter && curl -fsSL https://raw.githubusercontent.com/mistprismlabs/open-mist/HEAD/.claude/skills/skill-vetter.md -o ~/.claude/skills/mistprismlabs-open-mist-skill-vetter/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Skill Vetter does
description: "安装任何第三方 skill/plugin 之前的安全审查。当需要安装新 skill 或 plugin 时使用。"
Skill Vetter — 安装前安全审查
在安装任何 skill/plugin 之前,必须完成以下 4 步审查。适用于两种安装方式:
- 插件安装:
claude plugin install(hooks 拦截 Bash 命令) - 文件型 skill: 写入
.claude/skills/*.md(hooks 拦截 Write/Edit)
步骤 1: 元数据检查
获取目标 skill 的基本信息并验证:
- 名称: 是否与已知合法 skill 高度相似?(防 typosquatting)
- 版本: 是否有版本号?格式是否规范(semver)?
- 作者: 是否可追溯?是否有公开身份?
- 来源: 官方 marketplace 还是第三方?仓库星标数?
步骤 2: 权限范围分析
评估 skil
Alternatives in Development
- Auto Update — Pull the latest ECC repo changes and reinstall the current managed targets 243.5k ★
- Sharing Skills — skill for guidance 115.1k ★
- Template Skill — Minimal skeleton for a new skill project structure 97.5k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Ecc Guide
Navigate ECC's current agents, skills, commands, hooks, install profiles, and docs from the live repository su
Epic Claim
Claim an epic issue, stamp coordination state, and sync local ownership.
Root Cause Tracing
Use when errors occur deep in execution and you need to trace back to find the original trigger.
Third-party Notices
THE FOLLOWING SETS FORTH ATTRIBUTION NOTICES FOR THIRD PARTY SOFTWARE THAT MAY BE CONTAINED IN PORTIONS OF THI
Claude API
When code imports anthropic/@anthropic-ai/sdk/claude_agent_sdk, or user asks to use Claude APIBuild apps with the Claude API or Anthropic SDK
Releases
.
Related Agents
Tech Lead P9
P9 Tech Lead Agent。战略拆解→Task Prompt 定义→P8 团队管理→验收闭环。当需要协调多个 agent 完成复杂项目、将模糊需求拆解为可执行任务、或管理 3+ 并行 agent 时使用。触发词
Lifecycle Orchestrator
端到端交付主调度。读 .csp/lifecycle-state.json,按 roadmap→00→01→02→03→04→05→06→07 链路自动 spawn 对应 agent,前置未过则路由回上游。何时自动跑、何时
Notes Archivist
Obsidian 知识库维护专员。当用户提供新资料(视频摘要、文章、链接、PDF)需要摄取进 wiki/,或要求维护知识库(建页、更新索引/统计/日志、lint 检查)时使用。它直接在当前 vault 内产出笔记文件;面