Security checks across malware telemetry and agentic risk
The skill is advertised as a ClawHub search/explorer tool, but its bundle includes credentialed publishing, ranking-optimization automation, hardcoded local paths, and unsafe shell command construction.
Review before installing. Treat this as more than a read-only explorer: it can run shell commands, star skills, publish/update ClawHub listings, write local config files, and contains an exposed token that should be revoked. Only use it in a tightly controlled environment after removing the maintenance/publish scripts, replacing os.popen with safe subprocess calls, validating slugs, and deleting the hardcoded credential.
def _execute_clawhub_cmd(self, cmd: str) -> str:
"""Execute ClawHub CLI command"""
try:
result = os.popen(cmd).read().strip()
return result
except Exception as e:
print(f"❌ Error executing command: {e}")# 执行更新命令，增加超时时间
log_message("执行clawhub publish命令...")
result = subprocess.run(["clawhub", "publish",
"/Users/sunyanguang/.openclaw/workspace/custom-skills/clawhub-skill-explorer",
"--name", "ClawHub技能探索工具",
"--version", "1.0.0",log_message("API调用频率过高，将在10分钟后重试...", "WARNING")
time.sleep(600) # 等待10分钟
log_message("10分钟后重试技能更新...")
result = subprocess.run(["clawhub", "publish",
"/Users/sunyanguang/.openclaw/workspace/custom-skills/clawhub-skill-explorer",
"--name", "ClawHub技能探索工具",
"--version", "1.0.0",64/64 vendors flagged this skill as clean.