I
io.github.temurkhan13/openclaw-skill-vetter-mcp
openclaw-skill-vetter-mcp
MCP server for security-vetting third-party AI agent extensions: 41 detection rules.
No known CVEs
MIT license
Maintained
Last commit 105d ago
Works with most clients
Transport: stdio, sse, http
7 tools · ~450 tok
Grade A · 0.2% of 200K ctx
MCPpedia last refreshed this data
This server has been archived and is no longer actively maintained.
io.github.temurkhan13/openclaw-skill-vetter-mcp is an MCP server that MCP server for security-vetting third-party AI agent extensions: 41 detection rules. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 79/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"openclaw-skill-vetter": {
"env": {
"OPENCLAW_SKILL_VETTER_BACKEND": "mock"
},
"args": [
"-m",
"openclaw_skill_vetter_mcp"
],
"command": "python"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/io-github-temurkhan13-openclaw-skill-vetter-mcp)
Read me
What io.github.temurkhan13/openclaw-skill-vetter-mcp does
MCP server for security-vetting third-party AI agent extensions before installation — Claude skills, ClawHub plugins, agent tool packs, any code-shaped artifact that runs in your agent environment with your API keys. 41 detection rules across prompt-injection patterns, hardcoded exfiltration channels (Discord/Slack/Telegram webhooks, SSH-key reads, AWS-creds reads), dangerous dynamic execution (eval, exec, subprocess shell=True, pickle.loads), manifest/permission drift, and known typosquat dep
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
uvx 'openclaw-skill-vetter-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
79/100across 5 weighted dimensions
0255075100
30
20
15
10
−21
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.devNo known CVEs.
Checked openclaw-skill-vetter-mcp against OSV.dev.
Inventory
Tools (7)
Click any tool to inspect its schema.
~450 tokens total
Inventory
Resources (3)
skill-vetter://overviewinstalled-skills risk overview
skill-vetter://overview
skill-vetter://flaggedcurrently-flagged skills
skill-vetter://flagged
skill-vetter://rulesdetection rules catalog
skill-vetter://rules
Inventory
Prompts (2)
pre-install-skill-checkvet a specific skill before installation
weekly-skill-auditcompose a 200-word weekly audit of all installed skills
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is io.github.temurkhan13/openclaw-skill-vetter-mcp safe to use?
- io.github.temurkhan13/openclaw-skill-vetter-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
- How do I install io.github.temurkhan13/openclaw-skill-vetter-mcp?
- io.github.temurkhan13/openclaw-skill-vetter-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can io.github.temurkhan13/openclaw-skill-vetter-mcp do?
- io.github.temurkhan13/openclaw-skill-vetter-mcp provides 7 tools: vet_skill, vet_skill_directory, installed_skills_overview, flagged_skills_report, scan_for_prompt_injection and 2 more. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with io.github.temurkhan13/openclaw-skill-vetter-mcp?
- io.github.temurkhan13/openclaw-skill-vetter-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
- Is io.github.temurkhan13/openclaw-skill-vetter-mcp actively maintained?
- io.github.temurkhan13/openclaw-skill-vetter-mcp is less actively maintained — last commit was 105 days ago.
Related
Similar servers
Others in ai-ml
Dsh MCP Client97MCP client bridge: connects to MCP servers and registers their tools on ctx.tools
196.7k 4
Gpt Researcher97An autonomous agent that conducts deep research on any data using any LLM providers
29.2k 5
Modelcontextprotocol96The official MCP server implementation for the Perplexity API Platform
2.5k 4
I
io.github.mims-harvard/tooluniverse961000+ scientific tools for AI scientists: life science, reserach, literature, and more.
1.7k 4
MCP Security Weekly
Get CVE alerts and security updates for io.github.temurkhan13/openclaw-skill-vetter-mcp and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.