Clawsec Clawhub Checker
This is a pre-installation reputation gate that sits on top of clawsec-suite and queries ClawHub for metadata before letting you install a skill. It pulls inspect data, checks scanner results including VirusTotal summaries when available, scores based on age, update frequency, author history, and download counts, then blocks anything below threshold (default 70) unless you pass confirm-reputation. Exit code 43 means sketchy reputation, 42 means advisory hit. The verification workflow is thorough, maybe overkill for most users, but if you're running Claude skills in production and want an extra heuristic layer before code touches disk, this gives you a structured checkpoint. Manual hook wiring required if you want reputation warnings surfaced in advisory alerts.
- skills.sh installs
- 256
- GitHub stars
- 1.1K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add prompt-security/clawsec --skill clawsec-clawhub-checker --agent claude-codeInstalls into .claude/skills of the current project.
Files
ClawSec ClawHub Checker
Adds a reputation gate on top of the clawsec-suite guarded installer.
Vercel Skills Installation
Install with the Vercel Skills CLI for this harness:
npx skills add prompt-security/clawsec --skill clawsec-clawhub-checker -a openclaw -y
Operational Notes
- Required runtime:
node,clawhub,openclaw - Depends on: installed
clawsec-suite - Side effects: none on other skills; this package does not rewrite installed suite files
- Advisory-hook wiring is optional and manual in this release
- Network behavior: reputation checks call ClawHub inspect/search endpoints
- Trust model: scores are heuristic and confirmation-gated
What It Does
- Reads skill metadata from ClawHub (
inspect --json) - Evaluates scanner status (including VirusTotal summary when present)
- Applies additional reputation heuristics (age, updates, author history, downloads)
- Requires explicit
--confirm-reputationwhen score is below threshold
Installation
Install after clawsec-suite:
npx clawhub@latest install clawsec-suite
npx clawhub@latest install clawsec-clawhub-checker
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/prompt-security/clawsec
- Categories
- Security, AI & Agent Building
- First seen
- Jun 3, 2026
More from prompt-security/clawsec
All 10Recommended
More Security
game-engine-resourcesgmh5225/awesome-game-securityGuide for game-engine internals, source trees, plugins, and engine-specific security research. Use this skill when researching Unreal, Unity, Source, Godot, cus253skills.sh installs
clawsec-feedprompt-security/clawsecSecurity advisory feed package for OpenClaw-related threats and vulnerabilities. The upstream feed is updated daily; local automation is handled by clawsec-suit242skills.sh installsclawtributorprompt-security/clawsecHarness-neutral community incident reporting for AI agents. Contribute to collective security by reporting threats.207skills.sh installsclaw-releaseprompt-security/clawsecRelease automation for Claw skills and website. Guides through version bumping, tagging, and release verification.178skills.sh installsprompt-agentprompt-security/clawsecSecurity audit enforcement for AI agents. Automated security scans and health verification.138skills.sh installs
openclaw-secure-linux-cloudxixu-me/skillsUse when self-hosting OpenClaw on a cloud server, hardening a remote OpenClaw gateway, choosing between SSH tunneling, Tailscale, or reverse-proxy exposure, or 520.7Kskills.sh installs