Skill Hunter
PassAudited by ClawScan on May 1, 2026.
Overview
Skill Hunter is an instruction-only ClawHub search and vetting helper with disclosed public network calls and user-directed skill install/update commands.
This skill appears coherent and benign. Use it to search and inspect skills, but treat install, update, update-all, and uninstall as explicit approval steps, and do not put secrets or sensitive internal details into ClawHub search queries.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Search terms or skill identifiers may be visible to ClawHub, so users should avoid putting secrets or sensitive internal details into search queries.
The skill uses network calls to an external service for its core search and inspection function; this is disclosed and purpose-aligned, but user queries still leave the local environment.
All API calls go to clawhub.ai — the platform's own public endpoints. Nothing leaves your environment except search queries to ClawHub.
Use general descriptions for searches when possible and avoid including credentials, private project names, or confidential data in queries.
Installing or updating a skill can change what the agent may do in later sessions, and bulk updates can affect multiple installed skills at once.
The skill documents installing and updating other skills, including bulk update. This is central to its purpose and accompanied by vetting guidance, but it can change the agent's installed skill supply chain.
clawhub install <slug> ... clawhub update --all ... Skills install to `./skills/<slug>/` in your working directory.
Before install or update, review the target skill files and metadata, confirm the exact slug, and avoid `update --all` unless you have reviewed the affected skills.