Clawhub Publish Security

• Analyzed: May 7, 2026, 1:06 PM
• Findings: 1
• Version: 1.0.1
• Hash: 76d9bdf7cce75b20e45a9e990b6959e8d4019c0816b88f83394ad62c0333e013
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate security utility designed to scan local directories for sensitive information (API keys, passwords, phone numbers) before publication to ClawHub. The core logic in `security-scan.py` uses regular expressions to identify potential leaks and provides remediation advice without any network activity, data exfiltration, or persistence mechanisms. The documentation (SKILL.md, README.md, and VETTING_REPORT.md) is transparent, consistent with the tool's defensive purpose, and contains no malicious instructions or prompt-injection attempts.