ClawHub

Clawhub Local

v1.0.0

Use the ClawHub CLI to search, install, update, and publish agent skills from clawhub.com. Use when you need to fetch new skills on the fly, sync installed s...

⭐ 0· 1.2k·11 current·12 all-time
by@andy27725·duplicate of @vassiliylakhonin/vassili-clawhub-cli
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill's name and description match its requirements: it requires the 'clawhub' CLI and provides an npm-based install for the clawhub package. Nothing requested (binaries, install target) is unrelated to searching, installing, updating or publishing skills from clawhub.com.
ℹ
Instruction Scope
SKILL.md only instructs use of the clawhub CLI (search, install, update, list, publish, login). Those commands legitimately read/write local directories (default ./skills or overridden workdir) and contact the registry (https://clawhub.com by default). It does not instruct reading unrelated system files or secrets, but publish/login will involve authentication and the CLI will access network endpoints and local filesystem.
ℹ
Install Mechanism
Install is via npm (package 'clawhub'), which is traceable and expected for a CLI. npm packages may run install scripts and npm i -g modifies global binaries; this is appropriate for a CLI but carries the usual moderate risk of executing package-provided install-time code.
✓
Credentials
The skill declares no required environment variables. SKILL.md documents optional env overrides (CLAWHUB_REGISTRY, CLAWHUB_WORKDIR) and uses interactive CLI login for publishing. No unrelated credentials or high-privilege env vars are requested.
✓
Persistence & Privilege
always:false and normal autonomous invocation settings. The skill does not request permanent platform-wide privileges or attempt to modify other skills' configs. Installing the npm CLI creates a global binary (normal for CLIs) and using clawhub will write/modify skill folders (expected behavior).
Assessment
This skill is coherent: it just documents and helps use the ClawHub CLI. Before installing, consider: (1) npm install -g will place a global binary and npm packages can run install scripts — only install if you trust the package source; (2) the CLI will download and install third-party skills from a registry (default https://clawhub.com) — those skills can contain code that will run on your agent, so review or sandbox them before use; (3) publishing requires authentication (use secure credentials and be mindful of where they are stored); (4) if you prefer less impact, run the CLI in a container or VM, or avoid -g installs and use a local install instead. If you trust ClawHub and the skills you install, this skill is appropriate; if not, do not install.

Like a lobster shell, security has layers — review code before you run it.

latestvk97839ph56te7xvknnd7cnyn5583gs1d

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binsclawhub

Install

Install ClawHub CLI (npm)
Bins: clawhub
npm i -g clawhub

Comments