PR Babysitter
openinterpreter/openinterpreter
Watches an open GitHub pull request until it merges, handling review comments, diagnosing CI failures and retrying flaky checks along the way.
Security-first skill vetting for AI agents. An agent skill from freestylefly/wesight.
MITAuto-check: warnings
Install Skill Vetter
The automated check flagged lines worth reading first. See the safety section below.
$ npx skills add freestylefly/wesight --skill skill-vetter -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install freestylefly/wesight skill-vetter --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/freestylefly/wesight.git skills-src && mkdir -p .claude/skills && cp -r skills-src/SKILLs/skill-vetter .claude/skills/skill-vetter && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "skill-vetter" agent skill from https://github.com/freestylefly/wesight/tree/main/SKILLs/skill-vetter into .claude/skills/skill-vetter/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "skill-vetter", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/freestylefly/wesight/tree/main/SKILLs/skill-vetterType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add freestylefly/wesight --skill skill-vetter -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install freestylefly/wesight skill-vetter --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/freestylefly/wesight.git skills-src && mkdir -p .agents/skills && cp -r skills-src/SKILLs/skill-vetter .agents/skills/skill-vetter && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "skill-vetter" agent skill from https://github.com/freestylefly/wesight/tree/main/SKILLs/skill-vetter into .agents/skills/skill-vetter/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "skill-vetter", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add freestylefly/wesight --skill skill-vetter -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install freestylefly/wesight skill-vetter --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/freestylefly/wesight.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/SKILLs/skill-vetter .cursor/skills/skill-vetter && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "skill-vetter" agent skill from https://github.com/freestylefly/wesight/tree/main/SKILLs/skill-vetter into .cursor/skills/skill-vetter/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "skill-vetter", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/freestylefly/wesight.git --path SKILLs/skill-vetter--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add freestylefly/wesight --skill skill-vetter -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install freestylefly/wesight skill-vetter --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/freestylefly/wesight.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/SKILLs/skill-vetter .gemini/skills/skill-vetter && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "skill-vetter" agent skill from https://github.com/freestylefly/wesight/tree/main/SKILLs/skill-vetter into .gemini/skills/skill-vetter/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "skill-vetter", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install freestylefly/wesight skill-vetterInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add freestylefly/wesight --skill skill-vetter -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/freestylefly/wesight.git skills-src && mkdir -p .github/skills && cp -r skills-src/SKILLs/skill-vetter .github/skills/skill-vetter && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "skill-vetter" agent skill from https://github.com/freestylefly/wesight/tree/main/SKILLs/skill-vetter into .github/skills/skill-vetter/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "skill-vetter", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add freestylefly/wesight --skill skill-vetter -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install freestylefly/wesight skill-vetter --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/freestylefly/wesight.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/SKILLs/skill-vetter .opencode/skills/skill-vetter && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "skill-vetter" agent skill from https://github.com/freestylefly/wesight/tree/main/SKILLs/skill-vetter into .opencode/skills/skill-vetter/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "skill-vetter", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
skill-vetter- GitHub stars
- 944
- Used in
- 4 other repos
- Token cost
- ~982 tokens
- SKILL.md length
- 187 words
- Files
- 2
- Skills in repo
- 17
- Repo updated
- First seen
- Licence
- MIT
At a glance
Security-first skill vetting for AI agents. An agent skill from freestylefly/wesight.
- Works in 4 steps: Source Check → Code Review (MANDATORY) → Permission Scope → …
- SKILL.md covers When to Use, Vetting Protocol, Output Format and Quick Vet Commands, plus 2 more sections
- Calls curl and jq; reaches api.github.com and raw.githubusercontent.com
What it does
Skill Vetter is an agent skill from freestylefly/wesight. Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
Its SKILL.md is about 980 tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file (for example `_meta.json`).
It works with GitHub. The repository describes itself as: Open-source desktop AI agent workspace with one-click Claude Code, Codex, OpenClaw, Hermes Agent setup and custom LLM model routing. The licence is MIT.
Example prompts
- “/skill-vetter”
Workflow steps
4 steps, taken from the step headings in SKILL.md.
What it can do on your machine
Read from SKILL.md and the folder at commit c913cd9. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
curljq
From the folder's file list and the shell code blocks in SKILL.md.
Network
Hosts in commands or code, which the agent is likely to contact:
api.github.comraw.githubusercontent.com
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Skill Vetter loads about 982 tokens when it runs. Until then it costs about 49 tokens; SKILL.md has 187 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check: warnings
The automated check found patterns that need a careful read before installing.
- WarningMentions a credentials file (SSH keys, cloud or package-manager tokens)SKILL.md:41
• Reads ~/.ssh, ~/.aws, ~/.config without clear reason
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from freestylefly/wesight at commit c913cd9, republished under its MIT licence (© freestylefly). 187 words, ~982 tokens.
Download SKILL.mdSave it as
.claude/skills/skill-vetter/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.- name
- skill-vetter
- description
- Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
- version
- 1.0.0
Skill Vetter 🔒
Security-first vetting protocol for AI agent skills. Never install a skill without vetting it first.
When to Use
- Before installing any skill from ClawdHub
- Before running skills from GitHub repos
- When evaluating skills shared by other agents
- Anytime you're asked to install unknown code
Vetting Protocol
Step 1: Source Check
Questions to answer:
- [ ] Where did this skill come from?
- [ ] Is the author known/reputable?
- [ ] How many downloads/stars does it have?
- [ ] When was it last updated?
- [ ] Are there reviews from other agents?Step 2: Code Review (MANDATORY)
Read ALL files in the skill. Check for these RED FLAGS:
🚨 REJECT IMMEDIATELY IF YOU SEE:
─────────────────────────────────────────
• curl/wget to unknown URLs
• Sends data to external servers
• Requests credentials/tokens/API keys
• Reads ~/.ssh, ~/.aws, ~/.config without clear reason
• Accesses MEMORY.md, USER.md, SOUL.md, IDENTITY.md
• Uses base64 decode on anything
• Uses eval() or exec() with external input
• Modifies system files outside workspace
• Installs packages without listing them
• Network calls to IPs instead of domains
• Obfuscated code (compressed, encoded, minified)
• Requests elevated/sudo permissions
• Accesses browser cookies/sessions
• Touches credential files
─────────────────────────────────────────Step 3: Permission Scope
Evaluate:
- [ ] What files does it need to read?
- [ ] What files does it need to write?
- [ ] What commands does it run?
- [ ] Does it need network access? To where?
- [ ] Is the scope minimal for its stated purpose?Step 4: Risk Classification
| Risk Level | Examples | Action |
|---|---|---|
| 🟢 LOW | Notes, weather, formatting | Basic review, install OK |
| 🟡 MEDIUM | File ops, browser, APIs | Full code review required |
| 🔴 HIGH | Credentials, trading, system | Human approval required |
| ⛔ EXTREME | Security configs, root access | Do NOT install |
Output Format
After vetting, produce this report:
SKILL VETTING REPORT
═══════════════════════════════════════
Skill: [name]
Source: [ClawdHub / GitHub / other]
Author: [username]
Version: [version]
───────────────────────────────────────
METRICS:
• Downloads/Stars: [count]
• Last Updated: [date]
• Files Reviewed: [count]
───────────────────────────────────────
RED FLAGS: [None / List them]
PERMISSIONS NEEDED:
• Files: [list or "None"]
• Network: [list or "None"]
• Commands: [list or "None"]
───────────────────────────────────────
RISK LEVEL: [🟢 LOW / 🟡 MEDIUM / 🔴 HIGH / ⛔ EXTREME]
VERDICT: [✅ SAFE TO INSTALL / ⚠️ INSTALL WITH CAUTION / ❌ DO NOT INSTALL]
NOTES: [Any observations]
═══════════════════════════════════════Quick Vet Commands
For GitHub-hosted skills:
# Check repo stats
curl -s "https://api.github.com/repos/OWNER/REPO" | jq '{stars: .stargazers_count, forks: .forks_count, updated: .updated_at}'
# List skill files
curl -s "https://api.github.com/repos/OWNER/REPO/contents/skills/SKILL_NAME" | jq '.[].name'
# Fetch and review SKILL.md
curl -s "https://raw.githubusercontent.com/OWNER/REPO/main/skills/SKILL_NAME/SKILL.md"Trust Hierarchy
- Official OpenClaw skills → Lower scrutiny (still review)
- High-star repos (1000+) → Moderate scrutiny
- Known authors → Moderate scrutiny
- New/unknown sources → Maximum scrutiny
- Skills requesting credentials → Human approval always
Remember
- No skill is worth compromising security
- When in doubt, don't install
- Ask your human for high-risk decisions
- Document what you vet for future reference
Paranoia is a feature. 🔒🦀
© freestylefly, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 1 other file in SKILLs/skill-vetter of freestylefly/wesight.
- SKILL.md
- _meta.json
Open the folder on GitHubat commit c913cd9
Used in 4 other repositories
We found 6 copies of this SKILL.md (exact, near-identical or edited) in other folders, from 4 other GitHub owners. This page covers the copy in freestylefly/wesight, which our catalogue first saw on October 7, 2026.
Compare with similar skills
Skill Vetter next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Skill Vetter this skillfreestylefly/wesight | 944 | 4 repos | ~982 | Automated safety check: Warn | MIT | |
| PR Babysitteropeninterpreter/openinterpreter | 69k | 3 repos | ~4.2k | Automated safety check: Pass | Apache-2.0 | |
| Diagnosing Superpowers Sessionsobra/superpowers | 297k | 3 repos | ~1.7k | Automated safety check: Pass | MIT | |
| Greplooponyx-dot-app/onyx | 32k | 4 repos | ~3.3k | Automated safety check: Pass | MIT | |
| GitHub Deep Researchbytedance/deer-flow | 84k | 4 repos | ~1.3k | Automated safety check: Pass | MIT | |
| Update V8 Versionopeninterpreter/openinterpreter | 69k | 2 repos | ~845 | Automated safety check: Pass | Apache-2.0 |
Similar skills
Diagnosing Superpowers Sessions
obra/superpowers
Investigates a session where Superpowers went wrong, reads the transcripts on disk and produces an evidence-cited report, optionally prepared as a bug report for the maintainers.
Greploop
onyx-dot-app/onyx
Iteratively improves a PR (GitHub), MR (GitLab), or shelved changelist (Perforce) until Greptile gives it a 5/5 confidence score with zero unresolved comments.
GitHub Deep Research
bytedance/deer-flow
Researches a GitHub repository over four rounds using the GitHub API and web search, then writes a structured markdown report with timeline, metrics and Mermaid diagrams.
Update V8 Version
openinterpreter/openinterpreter
Bumps the pinned v8 and rusty_v8 versions in Codex, validates the release-candidate path with the v8-canary check, and traces failures to upstream build changes.
Last30days
mvanhorn/last30days-skill
Research what people actually say about any topic in the last 30 days.
More from freestylefly/wesight
All 17 skills in this repoDevelop Web Game
freestylefly/wesight
A skill your agent uses when Codex is building or iterating on a web game (HTML/JS) and needs a reliable development + testing loop: implement small changes, run a Playwright-based test script with…
Web Search
freestylefly/wesight
Real-time web search using Playwright-controlled browser. An agent skill from freestylefly/wesight.
Technology Search
freestylefly/wesight
Search tech blogs, developer forums, and IT media (TechCrunch, Hacker News, 36氪, etc.) for software and hardware industry updates with heat ranking and EN↔CN translation.
Content Planner
freestylefly/wesight
WeChat Official Account topic planning and content calendar management.
Films Search
freestylefly/wesight
Search cloud drives for downloadable film and TV resources (movies, TV series, anime).
Create Plan
freestylefly/wesight
Create a concise plan. An agent skill from freestylefly/wesight.
Related
Works with
Questions about Skill Vetter
What does Skill Vetter do?
Security-first skill vetting for AI agents. An agent skill from freestylefly/wesight. Skill Vetter is an agent skill from freestylefly/wesight. Security-first skill vetting for AI agents.
How do I install Skill Vetter in Claude Code?
Run `npx skills add freestylefly/wesight --skill skill-vetter -a claude-code`. Or copy the skill folder (SKILLs/skill-vetter in freestylefly/wesight) into .claude/skills/skill-vetter in your project. Claude Code loads it when a task matches its description.
How do I install Skill Vetter in Codex?
Run `npx skills add freestylefly/wesight --skill skill-vetter -a codex`. Or copy the skill folder (SKILLs/skill-vetter in freestylefly/wesight) into .agents/skills/skill-vetter in your project. Codex loads it when a task matches its description.
Can I use Skill Vetter in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add freestylefly/wesight --skill skill-vetter -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/skill-vetter, .gemini/skills/skill-vetter, .github/skills/skill-vetter and .opencode/skills/skill-vetter in your project.
What does Skill Vetter need to run?
Going by SKILL.md and its folder, Skill Vetter needs the command-line tools its instructions call (curl and jq).
Does Skill Vetter access the network?
SKILL.md names 2 domains. In commands or code: api.github.com and raw.githubusercontent.com; the agent is likely to contact these when it follows the instructions. This is read from the text; nothing was executed.
Is Skill Vetter safe to install?
Our automated static check of SKILL.md flagged 1 warning(s): mentions a credentials file (ssh keys, cloud or package-manager tokens). Read the flagged lines before installing; the check is not a guarantee either way.
What licence does Skill Vetter use?
Skill Vetter is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Skill Vetter use?
About 982 tokens (SKILL.md is roughly 3.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Skill Vetter?
Skills that share tags, products or a category with Skill Vetter: PR Babysitter (openinterpreter/openinterpreter, 69k stars), Diagnosing Superpowers Sessions (obra/superpowers, 297k stars), Greploop (onyx-dot-app/onyx, 32k stars) and GitHub Deep Research (bytedance/deer-flow, 84k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Skill Vetter?
freestylefly (a GitHub user) maintains it in freestylefly/wesight, which has 944 GitHub stars. The repository holds 17 skills in this directory. The repository was last updated on October 1, 2026.
Source: freestylefly/wesight on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.