Skill Vetting

~17% of ClawHub skills are malicious. Read before you install.

When to Use

• Before installing any skill from ClawHub or an external source
• When a skill requests unusual permissions or credentials

The Process

Step 1: Read the Source

Locate and read the skill's full SKILL.md and any scripts it references. Never install from a description alone.

Step 2: Check for Red Flags

Scan for each of these — flag any that are present: