autoworks-ai/autovault-website/trusted-skill-import

Trusted Skill Import

Use this skill when a user has a skill from a trusted external source and wants an agent to inspect it before local admission. It demonstrates the AutoVault review path for third-party skills without turning the public examples page into a marketplace.

Workflow

1. Confirm the source label, source URL, and expected provider name.
2. Read the complete SKILL.md before suggesting install.
3. Check that the skill declares its tools, filesystem access, network access,

and any required setup steps.

1. Compare the local copy against the provider source or checksum if one is

available.

1. Run the AutoVault gate and report whether the skill is ready for local

admission, needs edits, or should be rejected.

Expected Outcome

The user gets a clear provenance note, a local gate result, and a command they can run themselves:

tmpdir=$(mktemp -d)
trap 'rm -rf "$tmpdir"' EXIT
curl -fsSL https://example.com/trusted-provider/SKILL.md -o "$tmpdir/SKILL.md"
autovault add "$tmpdir" --source local --sync-profiles --yes

Do not install or execute any provider-supplied scripts until the user has reviewed the declared capability surface.