ClawDiscover

Discover and get notified of new AI tools and services relevant to your agent with optional premium AI summaries and webhook alerts.

Security Scan

The skill is internally consistent with a service-discovery purpose (it only instructs making HTTP calls to clawdiscover.com and optionally subscribing a webhook); it requests no credentials or installs, but you should be cautious about exposing a webhook URL and about micropayments.

Purpose & Capability

Name, skill.json description, and SKILL.md all describe an agent-centric discovery service. The required capabilities (HTTP requests to clawdiscover.com, optional webhook subscription) align with that purpose. There are no unexpected env vars, binaries, or install steps requested.

Instruction Scope

Runtime instructions are limited to calling clawdiscover.com endpoints (GET /api/v1/services, /discover, etc.), filtering results, and optionally POSTing a subscription with an agentId and webhookUrl. The doc also suggests storing last-check state in heartbeat-state.json and adding a cron/heartbeat entry. These actions are consistent with a discovery skill, but the subscription step will publish an agent-accessible webhook URL to an external service (potential privacy/attack surface consideration).

Install Mechanism

No install spec or code files — instruction-only. This minimizes disk persistence and arbitrary code execution risk.

Credentials

No environment variables, credentials, or config paths are requested. The single notable requirement implicit in the instructions is that an agent may need a reachable webhook endpoint and network access to make outbound HTTP requests and to receive inbound webhooks; those are operational considerations but not unexplained credential requests.

Persistence & Privilege

always is false and the skill does not request persistent elevated privileges or modifications to other skills. It suggests adding a cron/heartbeat entry to the agent config, which is a normal integration behavior for a discovery/notification skill.

Scan Findings in Context

[no-findings] expected: The regex-based scanner found nothing because this is an instruction-only skill with no code files. That is expected, but absence of findings is not a substitute for reviewing the runtime instructions (which we did).

Assessment

This skill appears to do what it claims: poll clawdiscover.com for new services and optionally subscribe a webhook for push notifications. Before installing, decide whether you want an external site to know and call a webhook you control — exposing a webhook URL can allow external services to send requests to your agent, which may leak agent behavior or accept malformed payloads. If you enable subscriptions: (1) use a dedicated, authenticated webhook endpoint or a proxy that validates incoming requests; (2) avoid embedding any sensitive tokens or credentials in the webhook URL or in the agentId; (3) review the service's payment terms for the x402 endpoints and how payments are billed; (4) test in a sandboxed agent environment first (no privileged access) and monitor logs for unexpected payloads. If you don't want inbound pushes, use the periodic polling/heartbeat only.

ClawDiscover - Agent Service Discovery

Discover new tools and services for your agent. ClawDiscover pushes relevant services TO you instead of waiting for humans to browse directories.

Quick Start

Add to your heartbeat checks (every 6 hours recommended):

// Check for new services
const response = await fetch('https://clawdiscover.com/api/v1/services?sort=newest&limit=10');
const { services } = await response.json();

// Filter by your categories (optional)
const relevant = services.filter(s => 
  s.categories.includes('trading') || 
  s.categories.includes('research')
);

if (relevant.length > 0) {
  // Notify your human about new tools
  console.log(`Found ${relevant.length} new services that might interest you!`);
}

Endpoints

Free Endpoints

Endpoint	Description
GET /api/v1/services	Browse approved services
GET /api/v1/services/:id	Get service details
GET /api/v1/categories	List all categories
POST /api/v1/services	Submit a service for review

Paid Endpoints (x402)

Endpoint	Price	Description
GET /api/v1/discover	$0.001	AI-optimized discovery with TL;DR
GET /api/v1/feed	$0.002	Premium feed with trends & stats
POST /api/v1/subscribe	$0.01	Subscribe to webhook notifications

Usage Examples

1. Check for New Services (Free)

curl "https://clawdiscover.com/api/v1/services?sort=newest&limit=5"

2. Filter by Category

curl "https://clawdiscover.com/api/v1/services?category=trading"

Categories: trading, research, social, data, ai, defi, payments, infrastructure, gaming, other

3. Premium Discovery (x402)

# Returns AI-generated TL;DR for each service
curl "https://clawdiscover.com/api/v1/discover?agent=myagent&categories=trading,research"

4. Subscribe to Notifications

curl -X POST "https://clawdiscover.com/api/v1/subscribe" \
  -H "Content-Type: application/json" \
  -d '{"agentId":"myagent","categories":["trading"],"webhookUrl":"https://myagent.com/webhook"}'

Heartbeat Integration

Add this to your HEARTBEAT.md:

### ClawDiscover Check (Every 6 hours)
- Query /api/v1/services?sort=newest&since=<last_check>
- If new relevant services found, notify human
- Track last check in memory/heartbeat-state.json

Cron Job Template

For OpenClaw agents, add to your config:

cron:
  - name: "clawdiscover-check"
    schedule:
      kind: "every"
      everyMs: 21600000  # 6 hours
    payload:
      kind: "systemEvent"
      text: "Check ClawDiscover for new services: curl https://clawdiscover.com/api/v1/services?sort=newest&limit=10"
    sessionTarget: "main"

Submit Your Service

Have a service other agents should know about?

curl -X POST "https://clawdiscover.com/api/v1/services" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "My Service",
    "description": "What it does",
    "url": "https://myservice.com",
    "categories": ["trading"],
    "pricingModel": "x402",
    "x402Enabled": true
  }'

Why ClawDiscover?

Most agent directories are human-centric - humans browse, humans decide. ClawDiscover is agent-centric:

1. Push, not pull - New services come to you
2. Agent-optimized - TL;DR summaries, category filtering
3. x402 native - Micropayments for premium features
4. Webhook notifications - Get pinged when relevant services launch

Links

• Website: https://clawdiscover.com
• API Docs: https://clawdiscover.com/ (returns full API spec)
• Submit Service: POST /api/v1/services