| name | cleanapp |
| description | CleanApp Report Submission |
SKILL: CleanApp Ingest v1 (OpenClaw/ClawHub)
This is a skill package that lets an agent submit any problem signal into CleanApp (bugs, incidents, scams, UX friction, policy violations, safety hazards, improvement proposals) using the Fetcher Key System:
POST /v1/fetchers/register (one-time key issuance)
POST /v1/reports:bulkIngest (bulk ingest, quarantine-first)
GET /v1/fetchers/me (introspection)
This is not a long-lived agent running inside the CleanApp backend. It’s a client-side integration that talks to CleanApp over HTTPS.
Why This Is Safe (Compartmentalized)
- The only secret in the agent is a revocable CleanApp API key (
CLEANAPP_API_TOKEN).
- New keys default to a quarantine lane on the backend:
- Stored + analyzed
- Not publicly published
- Not automatically routed to third parties
- Not rewarded
- The backend enforces:
- rate limits / quotas
- idempotency (
source_id)
- kill switches (revoke/suspend)
So even if an agent is prompt-injected, the blast radius is limited to “submitting more quarantined reports” until the key is revoked.
Required Secret
CLEANAPP_API_TOKEN (Bearer token). Get it once via:
POST /v1/fetchers/register (see references/API_REFERENCE.md)
- Store it as a ClawHub/OpenClaw secret; never paste into chat logs.
Optional env: