Clawclau

• Analyzed: May 11, 2026, 6:59 AM
• Findings: 1
• Version: 2.0.2
• Hash: 30ade1ae3d1b2788097247b0faa564f3013e20055007cd25ad4cf7130e609930
• Source: palm
• External report: View on VirusTotal

Findings (1)

The ClawClau skill bundle is a well-structured toolset for managing asynchronous Claude Code tasks using tmux and jq. While it employs high-risk flags such as --dangerously-skip-permissions in claude-spawn.sh to allow autonomous execution, this behavior is explicitly documented and central to its stated purpose of background task scheduling. The scripts demonstrate standard system administration patterns, such as double-forking for background monitoring and using a local JSON registry for state management, with no evidence of data exfiltration, obfuscation, or malicious intent.