← Back to Skills

skill-admission-gate

v1.0.0 official 4d ago
USK v3 ✅ Verified
⬇ Download
Install Guide↓
🤖 Agent install commands (curl / MCP / Claude Desktop)
▸ curl one-liner
curl -L -o skill-admission-gate.skill   "https://aiskillstore.io/v1/agent/skills/441382e1-cf40-48ab-a8f5-4cdc744b84c6/download?platform=ClaudeCode"
▸ MCP tool call (after registering Skill Store MCP)
{
  "tool": "download_skill",
  "arguments": {
    "skill_id": "441382e1-cf40-48ab-a8f5-4cdc744b84c6",
    "platform": "ClaudeCode"
  }
}
▸ Claude Desktop / Cursor MCP config (one-time)
{
  "mcpServers": {
    "skill-store": {
      "url": "https://aiskillstore.io/mcp/"
    }
  }
}
📖 Full agent API guide: /llms.txt  ·  MCP server card

技能上架安全闸门——一个技能/插件在安装或上架前,先跑确定性安全审查:查破坏性命令、远程执行、数据外泄、提示注入、隐蔽行为、混淆载荷与作用域越界,产出「分级发现 + 闸门判定 + 包指纹证据」。当需要审查第三方 skill、安装来源不明的技能、给自研技能做发布前安检、做供应链安全评估、或需要出具"该包未被篡改且已评估风险"的证据时调用。核心三件事:①按规则集扫全部文件并分级(BLOCK/WARN)②支持"已接受风险"声明(.admission-allow.json,须署名留痕)③输出包指纹与文件哈希作为"有证"产物。触发词:技能安全、审查 skill、安装前检查、恶意技能、skill 安全扫描、上架闸门、供应链安全、这个技能安全吗、第三方技能、能不能装、木马、后门、提示注入。

# skill-admission-gate # lgd-theory

Basic Info

Owner 👤 Steven Zhao Category — Registered 2026-10-16 Last Updated 2026-10-16 Latest Version 1.0.0 Packaged At 2026-10-16 Vetting Status official Downloads 0 Checksum (SHA256) 9e2e1b64006c31d53986bb85cc09b00086d495adb8f8c57308a492ab38ae43bc

⚡ AGENT INFO USK v3

Capabilities
skill admission gate
Permissions
✗ network
✗ filesystem
✗ subprocess
Interface
type: cli   entry_point: scripts/scan_skill.py   runtime: python3   call_pattern: args
Agent API
# 스킬 스키마 조회 (에이전트가 호출 방법을 파악) GET /v1/agent/skills/441382e1-cf40-48ab-a8f5-4cdc744b84c6/schema # 플랫폼별 자동 변환 다운로드 GET /v1/agent/skills/441382e1-cf40-48ab-a8f5-4cdc744b84c6/download?platform=OpenClaw GET /v1/agent/skills/441382e1-cf40-48ab-a8f5-4cdc744b84c6/download?platform=ClaudeCode GET /v1/agent/skills/441382e1-cf40-48ab-a8f5-4cdc744b84c6/download?platform=ClaudeCodeAgentSkill GET /v1/agent/skills/441382e1-cf40-48ab-a8f5-4cdc744b84c6/download?platform=Cursor GET /v1/agent/skills/441382e1-cf40-48ab-a8f5-4cdc744b84c6/download?platform=GeminiCLI GET /v1/agent/skills/441382e1-cf40-48ab-a8f5-4cdc744b84c6/download?platform=CodexCLI GET /v1/agent/skills/441382e1-cf40-48ab-a8f5-4cdc744b84c6/download?platform=CustomAgent

Installation

Compatible Platforms windows macos linux

1
Install the skill using openclaw_skill_manager.py.
python openclaw_skill_manager.py --install skill-admission-gate
2
Verify installation
python openclaw_skill_manager.py --list-installed
3
Install a specific version (optional)
python openclaw_skill_manager.py --install skill-admission-gate --version 1.0.0
1
Download the skill package.
curl -O https://aiskillstore.io/v1/skills/441382e1-cf40-48ab-a8f5-4cdc744b84c6/download
2
Place it in the Claude Code commands directory.
unzip skill-admission-gate.skill -d ~/.claude/commands/skill-admission-gate/
3
Use it as a slash command in Claude Code.
/skill-admission-gate
1
Download the Agent Skills package.
curl -O https://aiskillstore.io/v1/agent/skills/441382e1-cf40-48ab-a8f5-4cdc744b84c6/download?platform=ClaudeCodeAgentSkill
2
Unzip it into the Claude Code skills directory.
unzip skill-admission-gate-agent-skill-*.skill -d ~/.claude/skills/skill-admission-gate/
3
Restart Claude Code — the skill is auto-loaded at session start. No slash command needed.
1
Download the Cursor-converted package.
curl -O https://aiskillstore.io/v1/agent/skills/441382e1-cf40-48ab-a8f5-4cdc744b84c6/download?platform=Cursor
2
Unzip and place it in a permanent location.
unzip skill-admission-gate-cursor-*.skill -d ~/.cursor/skills/skill-admission-gate/
3
Add the MCP server config to .cursor/mcp.json, then restart Cursor.
cat ~/.cursor/skills/skill-admission-gate/cursor_mcp_config.json
1
Download the Gemini CLI-converted package.
curl -O https://aiskillstore.io/v1/agent/skills/441382e1-cf40-48ab-a8f5-4cdc744b84c6/download?platform=GeminiCLI
2
Unzip and place it in a permanent location.
unzip skill-admission-gate-geminicli-*.skill -d ~/.gemini/skills/skill-admission-gate/
3
Add the MCP server config to ~/.gemini/settings.json, then restart Gemini CLI.
cat ~/.gemini/skills/skill-admission-gate/gemini_settings_snippet.json
1
Download the Codex CLI-converted package.
curl -O https://aiskillstore.io/v1/agent/skills/441382e1-cf40-48ab-a8f5-4cdc744b84c6/download?platform=CodexCLI
2
Unzip and place it in a permanent location.
unzip skill-admission-gate-codexcli-*.skill -d ~/.codex/skills/skill-admission-gate/
3
Add the MCP server config to ~/.codex/config.toml, then restart Codex CLI.
cat ~/.codex/skills/skill-admission-gate/codex_config_snippet.toml
1
Download the skill package via REST API.
GET https://aiskillstore.io/v1/skills/441382e1-cf40-48ab-a8f5-4cdc744b84c6/download
2
Place it in your agent platform's skills directory.
cp skill-admission-gate.skill ./skills/
3
Fetch platform-specific details via the Install Guide API.
GET https://aiskillstore.io/v1/skills/441382e1-cf40-48ab-a8f5-4cdc744b84c6/install-guide?platform=CustomAgent

Requirements

Security Vetting Report

Vetting Result CAUTION

🚨 Security risks detected:

  • SKILL.md: eval(
  • SKILL.md: exec(
  • SKILL.md: requests.post(

Findings: ["USK v3 경고: input_schema.type이 'object'가 아닙니다", "USK v3 경고: output_schema.type이 'object'가 아닙니다", 'USK v3 경고: 이 스킬은 자동 변환 조건을 충족하지 않아 manual_install로 처리됩니다']

AI Review Stage

Reviewer gemini Risk Level 🟡 Medium Review Summary 스킬의 목적은 보안 검수 도구로 유용하나, 메타데이터의 권한 선언이 실제 기능 및 다른 메타데이터와 심각하게 불일치하여 추가 검토 및 수정이 필요합니다.

Issues Found

  • AI 응답이 토큰 한도로 잘렸으나 verdict 추출 성공
Reasoning

{ "verdict": "pending", "risk_level": "medium", "summary": "스킬의 목적은 보안 검수 도구로 유용하나, 메타데이터의 권한 선언이 실제 기능 및 다른 메타데이터와 심각하게 불일치하여 추가 검토 및 수정이 필요합니다.", "issues": [ "메타데이터의 `permissions` 필드(`network: false`, `filesystem: false`, `subprocess: false`)가 스킬의 실제 기능(파일 스캔 및 결과 작성) 및 `allowed-tools`(`Read`, `Write`, `Bash`, `WebFetch`)와 `risk_rationale`("读写文件", "本地执行", "调用 API") 내용과 심각하게 불일치합니다. 특히 파일 시스템 접근(`filesystem: true`)은 스킬 작동에 필수적입니다.", "`allowed-tools`에 `Bash`와 `WebFetch`가 선언되어 있으나

Version History

Version USK v3 Vetting Status Packaged At Downloads Changelog
v1.0.0 ✓ official 2026-10-16 ⬇ 0 1.0.0: initial upload (USK v3)

Reviews & Ratings

No reviews yet. Be the first to leave one!

✍️ Write a Review