ClawHub

System Hardener

v2.0.1

Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for System Hardener concepts, best practices, and implementation patt...

⭐ 0· 126·0 current·0 all-time
by@bytesagain1
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (reference for System Hardener concepts) aligns with the included materials (plain-text reference outputs). There is a minor metadata vs. script mismatch (package version 2.0.1 vs. script VERSION=2.0.0) but this appears to be a benign bookkeeping inconsistency.
✓
Instruction Scope
SKILL.md explicitly states the commands output plain-text docs and require no network or credentials. The runtime script only emits heredoc text and uses basic shell control flow; it does not read files, access environment secrets, make network calls, or transmit data externally.
✓
Install Mechanism
No install spec is provided (instruction-only behavior). A single helper script is bundled but it does not perform downloads, extraction, or write outside its own execution — low install risk.
✓
Credentials
The skill requests no environment variables or credentials and the script does not reference any secret env vars or config paths. No disproportionate access is requested.
✓
Persistence & Privilege
The skill does not request permanent presence (always=false) and does not modify agent or system configurations. It can be invoked autonomously by the agent (default), which is expected for skills, but there are no additional privileges.
Assessment
This skill appears to be a harmless, self-contained reference tool: it only prints builtin documentation and does not access the network or secrets. If you plan to run the bundled script, you can safely inspect scripts/script.sh locally (it is plain shell with heredocs) before invoking. Note the small non-security issues: metadata version (2.0.1) does not match the script's VERSION (2.0.0) and the help heredoc uses single quotes so $VERSION will not expand — both are benign maintenance issues. If you require absolute assurance, request the maintainer to bump the embedded VERSION to match the package and confirm there are no planned updates that would introduce external network or credential usage.

Like a lobster shell, security has layers — review code before you run it.

latestvk97488t46p3acad566hpq219mx83hr91

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments