Back to plugin

Security audit

Obsidian LiveSync

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a legitimate ClawHub CLI and repo-local skill set with disclosed registry, install, publishing, review, and staff-moderation workflows.

Install only if you intend to use ClawHub registry workflows. Treat the CLI token like a password, review skills before installing them, and use extra care with the repo-local staff moderation and content-rights skills because they can affect users, packages, public listings, and outbound email when run with admin credentials.

Static analysis

No suspicious patterns detected.