Security audit
Obsidian LiveSync
Security checks for vulnerabilities and agentic risk
Overview
This appears to be a legitimate ClawHub CLI and repo-local skill set with disclosed registry, install, publishing, review, and staff-moderation workflows.
Install only if you intend to use ClawHub registry workflows. Treat the CLI token like a password, review skills before installing them, and use extra care with the repo-local staff moderation and content-rights skills because they can affect users, packages, public listings, and outbound email when run with admin credentials.
Static analysis
No suspicious patterns detected.
