Security audit
Resilience
Security checks across malware telemetry and agentic risk
Overview
The package is coherent and purpose-aligned, with sensitive actions tied to explicit ClawHub CLI, review, publishing, or moderation workflows.
Use this only if you intend to interact with ClawHub/OpenClaw workflows. Expect it to store a ClawHub token locally after login, modify the chosen skills directory, contact the configured registry, optionally send install telemetry while logged in, and upload selected package contents when publishing; inspect package folders before publish and keep dry-run/confirmation gates for moderation or email actions.
VirusTotal
65/65 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.