SClawHub

Inspect published security reports for ClawHub skills before adding them to an agent workflow.

Website

Meet SClawHub

SClawHub provides security reports for skills published on ClawHub. Users can browse previously scanned skills or open a corresponding SClawHub URL to inspect a report. The scanner combines Semgrep checks with AI review to flag issues involving credential access, network requests, code execution, and potentially malicious behavior.

Reports present findings alongside a numerical risk rating, giving users information to review before installing a skill. A Chrome extension brings the inspection workflow closer to browsing the original catalog. The scanner, extension, and reports are publicly available through the project's open-source repositories. Its assessments are an aid to review, rather than a guarantee that a skill is safe.

Discussion

Tried it? Share a useful thought or ask a question.

Product details

Status
Launched
Listed

Explore related topics