Fox Skill Vetter
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill is an instruction-only vetting checklist whose requested capabilities and instructions match its stated purpose, but there are minor metadata inconsistencies and runtime network/read-all-files guidance you should confirm before trusting automated runs.
This skill is internally coherent and appears to do what it says: a checklist for vetting other skills. Before installing or allowing automated runs: (1) verify the publisher/owner identity — the _meta.json ownerId/slug does not match the registry metadata shown here, which could indicate a packaging or copy issue; (2) decide whether you want this vetter to run autonomously — it may perform network fetches (GitHub API/raw.githubusercontent) and read all files of candidate skills, so grant only the minimal runtime permissions you trust; (3) if you rely on its automated report to make install decisions, spot-check its findings manually for high-risk skills; and (4) confirm your platform/network policy for allowing curl/github access to avoid accidental data exposure.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
No visible risk-analysis findings were reported for this release.