clawhub — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited clawhub (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Install
npm i -g clawhubAuth (publish)
clawhub login
clawhub whoamiSearch
clawhub search "postgres backups"Install
clawhub install my-skill
clawhub install my-skill --version 1.2.3Update (hash-based match + upgrade)
clawhub update my-skill
clawhub update my-skill --version 1.2.3
clawhub update --all
clawhub update my-skill --force
clawhub update --all --no-input --forceList
clawhub listPublish
clawhub publish ./my-skill --slug my-skill --name "My Skill" --version 1.2.0 --changelog "Fixes + docs"Notes
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.