ClawHub Login Helper

• Analyzed: May 11, 2026, 4:57 AM
• Findings: 1
• Version: 1.0.0
• Hash: 80ecd958d32edfb0c79385088d4ab7d5400e43aea40a0051d484ac8c84ed5b09
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. The `SKILL.md` provides clear, non-malicious instructions to the AI agent, aligning with the stated purpose of facilitating ClawHub OAuth login in a headless environment. The `scripts/clawhub_login.py` script interacts with the `clawhub` CLI tool using `subprocess.run` to perform login, status checks, and logout by managing a local token file (`~/.clawhub/token`). There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent beyond the stated purpose.