agent-skill-trust-check

spec	usk/1.0
name	agent-skill-trust-check
version	0.1.2
description	Static pre-install trust review for SKILL.md, OpenClaw, Hermes, MCP, and agent-skill marketplace packages before they request local, account, payment, or external access.
interface	{"type":"cli","entry_point":"bin/agent-skill-trust-check-stdin.js","runtime":"node","call_pattern":"stdin_stdout"}
input_schema	{"type":"object","properties":{"text":{"type":"string","description":"SKILL.md, marketplace description, or install instructions to review before installation."},"target":{"type":"string","description":"Optional source label for the reviewed text."}},"required":["text"]}
output_schema	{"type":"object","properties":{"verdict":{"type":"string","description":"Static install-readiness verdict."},"risk_score":{"type":"integer","description":"Aggregate static risk score."},"findings":{"type":"array","description":"Matched risky behavior signals and suggested fixes."},"missing_signals":{"type":"array","description":"Provenance or safety signals not found in the target text."}}}
permissions	{"network":false,"filesystem":false,"subprocess":false,"env_vars":[]}
category	security
capabilities	["skill_review","agent_skill_security","marketplace_vetting","mcp_review"]
license	MIT
tags	["security","agent-skills","skill-review","mcp"]
author	Tate Programs
homepage	https://github.com/TateLyman/agent-skill-trust-check
platform_compatibility	["Claude Code","Codex CLI","Cursor","Gemini CLI","OpenClaw Agent"]
requirements	{"node":">=20"}
changelog	Added a marketplace-safe stdin runner that needs no filesystem or network access.

Agent Skill Trust Check

Use this skill before installing a third-party agent skill, SKILL.md package, MCP-linked skill, or marketplace listing.

What This Skill Does

• Reads a public or local skill description before install.
• Flags patterns that deserve review: shell execution, destructive commands, secrets, wallet/payment actions, network output, persistence, and prompt-boundary issues.
• Separates basic provenance signals from risky behavior signals.
• Produces a patch order that a maintainer can resolve before the skill is trusted.

When To Use

Use this when an agent is about to install or recommend a skill from:

• OpenClaw, Hermes, or ClawHub-style marketplaces.
• Claude Code, Codex, Cursor, Windsurf, or Gemini skill directories.
• MCP-linked skill bundles.
• GitHub repositories that include a SKILL.md, tool manifest, or install script.

Run From The Public Repo

git clone https://github.com/TateLyman/agent-skill-trust-check.git
cd agent-skill-trust-check
npm run check
node bin/agent-skill-trust-check.js ./SKILL.md

Marketplace-safe stdin mode:

node bin/agent-skill-trust-check-stdin.js < ./SKILL.md

For JSON output:

node bin/agent-skill-trust-check.js ./SKILL.md --json

npm command:

npx --yes agent-skill-trust-check ./SKILL.md --json

Review Rules

Before installation, check:

• Does the skill run shell commands, package installers, or process-spawn APIs?
• Does it read secrets, environment variables, wallet data, credentials, cookies, or private keys?
• Does it send content to remote URLs or webhooks?
• Does it create persistent background jobs?
• Does it ask the agent to ignore or override higher-priority instructions?
• Does it document source, license, version, tests, permissions, and uninstall steps?

Boundaries

This is a static pre-install check. The marketplace-safe runner reads only stdin and returns JSON. The local CLI can also read a local path or a public GitHub/raw/Gist URL when run from the repository checkout. Neither mode executes the target skill or proves the runtime is safe.

For marketplace-grade review, use the paid Agent Skill Trust Check listing:

https://orkai.ai/skills/agent-skill-trust-check