Clawhub Skill Monitor

• Verdict: Pass
• Confidence: High
• Analyzed: Mar 31, 2026, 12:26 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code, instructions, and requirements are coherent with its stated purpose (querying ClawHub public package metadata) and do not request unrelated credentials or perform unexpected external communication beyond the ClawHub public API.

This skill appears to do exactly what it says: it queries the ClawHub public API for an author's public skill metadata and can export results to CSV/JSON/text. No credentials are needed. Before installing, consider: (1) the script will make network requests to https://clawhub.ai and may perform many requests if you set large page limits or enable per-package detail fetching; (2) exported CSVs are written to the local filesystem at a path you specify; (3) if you want extra assurance, review the full scripts/clawhub_monitor.py file (it is included) — it uses requests/urllib for HTTP calls and does not appear to contact any other external hosts or read secrets. If those behaviors are acceptable, the skill is coherent and safe to install from a security-proportionality perspective.