openclaw-skill-vetter-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| OPENCLAW_SKILLS_DIR | No | Path to skills directory (default: ~/.openclaw/skills/) | |
| OPENCLAW_SKILL_VETTER_BACKEND | No | Backend to use: mock, openclaw-skills-dir, or clawhub-fetch (default: mock) | mock |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| vet_skillA | Run all scanners on a single skill — manifest, static patterns, AST, dependencies. Returns a VetReport with risk_score (0-100), risk_level (BLOCK/REVIEW/CAUTION/CLEAN), per-finding details, and a one-paragraph summary. Use this before installing a skill. |
| vet_skill_directoryA | Run all scanners on every skill in the configured directory and return an aggregate report (per-skill VetReports + counts by risk level). Use this for a periodic audit of installed skills. |
| installed_skills_overviewA | Lightweight overview — just the risk-level counts and the IDs of any skills at REVIEW or BLOCK level. Faster than vet_skill_directory; use this for status-bar / dashboard callers. |
| flagged_skills_reportA | Returns just the REVIEW + BLOCK skills with their findings, sorted by risk_score descending. Use this when you only care about what needs attention. |
| scan_for_prompt_injectionA | Run only the prompt-injection scanner on a single skill. Returns its VetReport with non-prompt-injection findings stripped — useful when you want a focused signal. |
| scan_for_exfiltrationA | Run only the exfiltration scanner on a single skill. Returns its VetReport with non-exfiltration findings stripped — useful for focused investigation of a suspected data-leak skill. |
| list_detection_rulesA | Return the catalog of every detection rule this server applies, with rule IDs, severities, and descriptions. Use this to understand what the vetter checks (and what it doesn't). |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
| pre-install-skill-check | Walk through vetting a specific skill before installation |
| weekly-skill-audit | Compose a 200-word audit of all installed skills |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
| Installed-skills risk overview | Risk-level counts + flagged skill IDs from the configured skills directory |
| Currently-flagged skills | REVIEW + BLOCK skills with their findings, sorted by risk_score |
| Detection rules catalog | Full catalog of detection rules this server applies |
TDQS
Scored across 7 tools
Each tool has a clearly distinct purpose: scanning a single skill (full or specific scanners), scanning directory, listing rules, and generating reports/overviews. No two tools overlap in functionality.
All tool names follow a consistent verb_noun pattern in snake_case (e.g., scan_for_exfiltration, list_detection_rules, vet_skill_directory). No mixing of styles.
With 7 tools, the server covers the core workflows of skill vetting—individual scans, directory audits, rule listing, and reporting—without unnecessary bloat or missing essentials.
The tool set provides full coverage for skill vetting: listing available checks, running comprehensive or targeted scans on a single skill, auditing all skills, and obtaining summarized or detailed reports. No obvious gaps.