clawsec-clawhub-checker
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation includes a script for verifying release integrity by fetching signatures and public keys from the official GitHub repository associated with the vendor.
- [COMMAND_EXECUTION]: The reputation checking logic invokes the
clawhubCLI utility to obtain metadata and security scanner summaries for evaluated skills. - [COMMAND_EXECUTION]: The application acts as a protective wrapper that executes the underlying
clawsec-suiteinstallation process via thenodeenvironment. - [COMMAND_EXECUTION]: Input parameters such as skill slugs and version strings are strictly validated using regular expressions to prevent command injection attacks.
Audit Metadata