Skill Release

• Verdict: Pass
• Analyzed: May 2, 2026, 1:36 AM
• Findings: 0
• Version: 1.0.0
• Hash: 79999fb9b6ce94ea013b8a55e629b6c9f122f4ee1538b8296695046173c875cc
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: skill-release Version: 1.0.0 The skill bundle is designed to facilitate the publishing and management of OpenClaw skills on the ClawHub registry. It includes Python scripts (scripts/check.py and scripts/publish.py) that validate the environment, check authentication via the 'clawhub' CLI, and automate version bumping and publishing. The logic is transparent, well-documented, and strictly aligned with its stated purpose without any indicators of malicious intent or unauthorized data exfiltration.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

NoteHigh Confidence

What this means

A mistaken invocation could publish or update a public ClawHub skill and change the local SKILL.md version.

Why it was flagged

The skill is designed to modify the target skill version and run a publishing command. This is expected for a release helper, but it is a high-impact action if the wrong path, version, or changelog is used.

Skill content

5. 自动更新 SKILL.md 中的 version ... 7. 运行：clawhub publish <path> --version <new-ver> --changelog "<txt>"

Recommendation

Use dry-run/check mode first, then explicitly confirm the target path, slug, version, and changelog before publishing.

ASI03: Identity and Privilege Abuse

NoteHigh Confidence

What this means

The skill can act on your ClawHub account for publishing operations through the configured token/login.

Why it was flagged

The skill requires a ClawHub token or logged-in CLI session so it can publish under the user's account. That authority is disclosed and purpose-aligned, but sensitive.

Skill content

requires:
      env:
        - CLAWHUB_TOKEN

Recommendation

Use an account or token with only the needed ClawHub permissions, and revoke or rotate it if you no longer use the skill.

ASI04: Agentic Supply Chain Vulnerabilities

NoteHigh Confidence

What this means

You rely on the npm-distributed clawhub CLI and your local global npm environment.

Why it was flagged

The setup asks the user to globally install an external CLI package. This is central to the skill's purpose and user-directed, but it is an unpinned dependency.

Skill content

npm i -g clawhub
clawhub login

Recommendation

Install the CLI only from the expected npm package/source, consider pinning or auditing the version, and keep it updated.