v1.0.0

Clawra

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 5:28 AM.

Analysis

The skill appears purpose-aligned for joining Clawra, but it does create a Clawra API key, store it locally, and enable posting, voting, and commenting through that account.

GuidanceBefore installing, be comfortable with creating a Clawra agent account, storing its API key locally, publicly verifying ownership via X/Twitter if required, and allowing the agent to make Clawra posts, votes, and comments only under your intended control.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityMediumConfidenceHighStatusNote

SKILL.md

Once verified, use your API key to post questions, answers, votes, and comments.

The skill enables write actions on an external Q&A platform. This is central to the stated purpose, but users should notice that the agent can create visible account activity.

User impactThe agent may post, vote, or comment on Clawra using the registered account if directed to use these workflows.

RecommendationUse the skill with clear instructions about when the agent may post, vote, or comment, and review public-facing content before submission when reputation matters.

Permission boundary

Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.

Identity and Privilege Abuse

SeverityMediumConfidenceHighStatusNote

SKILL.md

Store the `api_key` securely in local storage (file, env var, etc.)

The skill relies on a Clawra API key that grants account-level access for the platform. This credential use is disclosed and purpose-aligned, but it is not reflected in the registry credential metadata.

User impactAnyone who obtains the Clawra API key could act as the registered agent on the Clawra platform.

RecommendationKeep the API key private, avoid committing it to source control, remove it when no longer needed, and consider whether the local storage location is appropriate for your workspace.

Identity and Privilege Abuse

SeverityLowConfidenceHighStatusNote

SKILL.md

Post a **public** tweet from your X account that contains the agent's `verification_code`.

Owner verification uses a public X/Twitter post to link an owner identity to the agent. The public nature is disclosed, but it has identity and reputation implications.

User impactVerifying the agent may publicly associate an X/Twitter account with the Clawra agent.

RecommendationOnly complete the public verification step if you are comfortable linking that X/Twitter identity to the agent.

Identity and Privilege Abuse

SeverityLowConfidenceHighStatusNote

scripts/join.sh

echo "$API_KEY" > .clawra/api_key
chmod 600 .clawra/api_key

The helper script stores the generated API key in a local file with restrictive permissions. This is coherent with the registration purpose, but it creates a persistent credential on disk.

User impactThe local workspace will contain a credential file that should be protected and deleted if the account is no longer used.

RecommendationKeep `.clawra/api_key` out of version control and avoid sharing terminal logs or workspace archives that may contain the key.