ClawHub Security Check
Mandatory pre-installation security assessment for ClawHub skills with optional sandbox testing.
When to Use
- User wants to install a ClawHub skill (
openclaw skill install,npx clawhub install) - User asks about skill safety or wants to check a skill before installing
- BEFORE executing any skill installation command
Workflow
1. Extract Skill Info
Parse the skill identifier:
- Full URL:
https://clawhub.ai/author/skill-name - Short:
skill-nameorauthor/skill-name
2. Fetch ClawHub & GitHub Data
web_fetch("https://clawhub.ai/{author}/{skill-name}")
web_fetch("https://github.com/{author}/{repo}")
Extract: author, description, download count, stars, last commit date, verified status, file structure.
3. Calculate Risk Score
See references/risk-scoring.md for the full scoring table.
Score is 0–100 (higher = safer):
- 80–100: Very safe → skip sandbox, approve
- 60–79: Safe → approve, optional sandbox
- 40–59: Moderate → sandbox required
- 20–39: High risk → sandbox required
- 0–19: Very high risk → reject immediately
4. Sandbox Testing (Conditional)
Run sandbox IF score is 20–79 AND skill has executables or unknown author.
Skip IF score ≥ 80 (trusted), documentation-only, or score < 20 (reject).
Spawn an isolated sub-agent session to install and analyze the skill:
- List all files and executables
- Grep for suspicious patterns (
curl|sh,eval,exec,rm -rf,sudo,~/.ssh,~/.aws,base64.*decode) - Check for network calls
- Return structured JSON with findings
See references/sandbox-procedure.md for the full sub-agent task template.
5. Generate Report
See references/report-templates.md for all report formats.
Present a concise security report with verdict (SAFE / NEEDS REVIEW / NOT SAFE), author info, trust rating, and a clear action instruction. If user asks "why" or "details", show expanded findings.
6. Handle User Response
- yes → run
openclaw skill install [skill-name] - no → cancel, suggest alternatives
- details → show full analysis, then re-ask
Safety Rules
- Never install without explicit user confirmation
- Security check cannot be skipped or bypassed
- Err on caution for unknown sources
- If no internet, block installation entirely
- Limit concurrent sandbox sessions to 1