Clawhub Skill Monitor

• Verdict: Advisory
• Analyzed: Mar 31, 2026, 12:46 PM
• Findings: 0
• Version: 1.0.0
• Hash: 6b030b12c6927c0b35c46a098cbb344417e9136d3196242ae21ce50b603b9c51
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: clawhub-skill-monitor Version: 1.0.0 The skill is a legitimate utility for querying public package metadata from the ClawHub API (https://clawhub.ai). The Python script scripts/clawhub_monitor.py implements standard pagination and filtering logic using requests or urllib, and the documentation (SKILL.md, README.md) accurately describes its functionality and limitations. No indicators of data exfiltration, malicious execution, or prompt injection were found.