clawdhub
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the 'clawdhub' CLI package from the npm registry.
- [EXTERNAL_DOWNLOADS]: The skill fetches and updates agent skill code from the vendor's remote registry at clawdhub.com.
- [COMMAND_EXECUTION]: The skill executes shell commands to perform skill management tasks, including installation and local file hashing during updates.
- [DATA_EXFILTRATION]: The 'publish' command transmits the contents of local skill folders and associated metadata to the external registry at clawdhub.com.
Audit Metadata