Skill Vetter Jarvis
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This is an instruction-only vetting checklist whose requirements and instructions align with its stated purpose; nothing in the package requests unrelated credentials or installs code.
This skill is an instruction-only vet checklist and appears coherent with its stated purpose. Before using it: 1) Ensure your agent environment has curl and jq if you want to run the example quick-commands (SKILL.md does not declare required binaries). 2) When following its advice, ensure the agent reads only the skill bundle files (not arbitrary home directories) — vetting should not grant the agent blanket access to your ~/.ssh, ~/.aws, or other sensitive paths. 3) The _meta.json version (1.0.1) differs from the SKILL.md header (1.0.0); this is minor but you may want to confirm the canonical version. 4) Do not let automated vetting be the sole decision-maker for high-risk skills — follow its checklist and require human review for medium/high/extreme findings.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
No visible risk-analysis findings were reported for this release.