Clawhub Skills Rank
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a straightforward ClawHub rank-checking skill that sends user-provided skill slugs and keywords to ClawHub’s public search API.
This skill looks safe for its stated purpose. Before installing, be aware that any skill slug and keyword you ask it to check will be sent to ClawHub’s public search API; avoid using private or sensitive internal terms if that matters to you.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Skill slugs and search keywords entered by the user are sent to clawhub.ai to retrieve ranking data; no credentials or local files are accessed in the provided code.
The script makes outbound GET requests to ClawHub using the user-provided keyword. This is the core advertised function and is narrow in scope, but it means query terms are sent to an external service.
url = f"https://clawhub.ai/api/search?q={encoded_kw}" ... urllib.request.urlopen(req, timeout=15)Use only keywords and skill slugs you are comfortable sending to ClawHub, and keep rank checks user-directed.