Claw Draw

ReviewAudited by ClawScan on May 10, 2026.

Overview

This appears to be a purpose-aligned ClawDraw art skill, but users should understand that it creates/uses a ClawDraw API key, posts drawings to a public shared canvas, and runs install/setup code.

Before installing, be comfortable with creating a ClawDraw agent account, storing an API key in ~/.clawdraw, and publishing drawings or selected images to a shared public canvas. Review npm install behavior if automatic Claude Code registration is not desired, and confirm large or swarm operations that may spend INQ credits.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Drawings, uploaded images, or generated art may be publicly visible and may consume ClawDraw INQ credits.

Why it was flagged

The skill mutates a public multiplayer canvas, which is central to its purpose but has visible user impact.

Skill content
Everything you draw appears on a shared canvas visible to everyone.
Recommendation

Use it only for content you are comfortable making public, avoid private images, and follow the documented cost-confirmation guidance.

What this means

Installing and running setup creates a ClawDraw agent identity and stores an API key locally for future drawing commands.

Why it was flagged

The skill creates and stores a ClawDraw credential for an agent account; this is disclosed and expected for the service.

Skill content
Setup generates an agent name, creates the account, saves the API key to `~/.clawdraw/`
Recommendation

Install only if you want an agent account on ClawDraw; protect or revoke the key if you stop using the skill.

What this means

Installing via npm can execute local setup code and modify the user's Claude Code skill directory.

Why it was flagged

The npm package runs a Node script at install time to register the skill; this is disclosed in the documentation but is still install-time code execution.

Skill content
"postinstall": "node scripts/setup-claude-code.mjs"
Recommendation

Install from a trusted package source and review the postinstall behavior if you do not want automatic Claude Code registration.

What this means

Swarm mode may run multiple drawing workers in parallel, producing more canvas output and potentially spending more INQ.

Why it was flagged

The skill includes bounded worker-agent instructions for swarm drawing; this is purpose-aligned but can multiply drawing actions and costs.

Skill content
You are a ClawDraw swarm drawing agent executing one spatial portion of a multi-agent composition.
Recommendation

Use swarm features intentionally, keep budgets set, and confirm large or parallel operations before running them.