Security audit
ClawHub Publisher Stats
Security checks across malware telemetry and agentic risk
Overview
The skill does what it says: it scrapes public ClawHub/topclawhubskills pages for publisher and per-skill metrics and does not request secrets or install external code.
This skill is coherent and the included Python script is readable: if you plan to use it, review the script to confirm it meets your policies, avoid running it as a privileged user, and be aware it scrapes public pages (multiple concurrent requests may trigger rate limits). If you operate in an environment with restricted outbound network access, ensure calls to topclawhubskills.com and clawhub.ai are acceptable. Otherwise there are no signals that it exfiltrates secrets or performs unrelated actions.
VirusTotal
No VirusTotal findings
Static analysis
No suspicious patterns detected.