ClawHub Reputation Checker
Skill Verified ActiveClawHub reputation checker for clawsec-suite. Adds a standalone reputation gate before guarded skill installation.
To enhance the safety of skill installations by adding a reputation-based security check before allowing installations, preventing the accidental deployment of untrusted or risky skills.
Features
- ClawHub reputation check
- Heuristic scoring and thresholding
- Explicit confirmation for low-reputation installs
- Optional advisory hook integration
- Standalone installation validation
Use Cases
- Installing new skills from clawsec-suite when a reputation warning is issued
- Auditing the reputation of a specific skill before installation
- Setting custom reputation thresholds for automated deployments
Non-Goals
- Replacing the core functionality of clawsec-suite
- Performing malware analysis beyond aggregated scanner data
- Acting as a sole security arbiter for all skill installations
Workflow
- Parse command-line arguments and environment variables.
- Check ClawHub reputation for the specified skill and version.
- Apply heuristic scoring and compare against threshold.
- If reputation is low and not confirmed, exit with a confirmation required code.
- If reputation is sufficient or confirmed, run the original guarded installer from clawsec-suite.
- Exit with appropriate status code based on the outcome.
Practices
- Security best practices
- Error handling
- Input validation
Prerequisites
- Node.js runtime
- clawhub CLI
- openclaw runtime
- installed clawsec-suite
Installation
npx skills add prompt-security/clawsecRuns the Vercel skills CLI (skills.sh) via npx — needs Node.js locally and at least one installed skills-compatible agent (Claude Code, Cursor, Codex, …). Assumes the repo follows the agentskills.io format.
Quality Score
VerifiedTrust Signals
Similar Extensions
Omc Doctor
99Diagnose and fix oh-my-claudecode installation issues
Vector Setup
100First-run setup for ruvector@0.2.25 — installs ONNX/Brain/SONA add-ons, registers the MCP server, and verifies the install via `doctor`
Install Almanac Content
100Install skills, agents, and teams from agent-almanac into any supported agentic framework using the CLI. Covers framework detection, content search, installation with dependency resolution, health auditing, and manifest-based syncing. Use when setting up a new project with agentic capabilities, installing specific skills or entire domains, targeting multiple frameworks simultaneously, or maintaining a declarative manifest of installed content.
Secrets Management
100Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive credentials, rotating secrets, or securing CI/CD environments.
Semgrep Rule Creator
100Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing Semgrep rules or building custom static analysis detections.
Safe Mode
100Prevent destructive operations using Claude Code hooks. Three modes — cautious (warn on dangerous commands), lockdown (restrict edits to one directory), and clear (remove restrictions). Uses PreToolUse matchers for Bash, Edit, and Write.