skill-vetting

Reviews a candidate skill before activation with quarantined source inspection, version and license provenance, file hashes, static risk triage, and separate signature evidence. Use when the user says "check this skill before installing", "verify this NVIDIA skill", "review a skill update", or "is this plugin safe enough for our task".