Report ClawHub Malicious Skill

Overview

Use this workflow to help someone report a malicious ClawHub skill and propose a ClawScan profile change that catches it. Keep sensitive details private and make the public PR contain only the candidate ClawScan config.

Safety Boundary

Separate private evidence from public contribution material: