agentsclimarketplace

Example skill

Skill jovd83/skill-vetting-reporter/examples/example-skill

Security & trust vetting for AgentSkills: mandatory open-source scanner gate (Cisco, NVIDIA SkillSpector, Snyk, sentry), OWASP Top 10 for Agentic Applications mapping, and tiered review reports.

Install
npx -y skills add jovd83/skill-vetting-reporter --skill example-skill

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Example fixture skill bundled with skill-vetting-reporter. It fetches a public weather forecast for a city and returns a one-line summary. It exists only to demonstrate what a vetting report looks like — including a deliberate false positive — and is not meant to be installed or used for real work.

The file declares its own license as MIT. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.

SKILL.md

1.1 KB, 159 tokens by cl100k_base, as published. Nobody here has run it

Example Weather Fetcher (fixture)

Given a city name, fetch the current forecast and return a short summary.

Workflow

  1. Read the city name from the user.
  2. Call the public forecast endpoint and parse the JSON response.
  3. Return a one-line summary (temperature and conditions).

Notes

  • This skill sends nothing outbound except the single forecast request in scripts/fetch.py. The word webhook appears here purely as documentation prose — the skill registers none. In the sample report that one word trips an exfiltration keyword heuristic and surfaces as a critical the reviewer dismisses as "documented-not-performed". That is the intended lesson: the scanner flags candidates; a human decides.

What ships with it: 1 file

712 B alongside SKILL.md, 1 of them executable

scripts/

Keep looking

Skills are one crate of 326,984. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.