Menu
Security scanner for ClawHub skills from Gen Digital. Looks up skill safety via the scan API.
Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.
Baseado na classificação ocupacional SOC
Complete community building, engagement, and monetization system. From zero to thriving community — launch strategy, member engagement loops, content programming, moderation frameworks, growth tactics, monetization models, and health metrics. Works for Discord, Slack, Telegram, Circle, forums, or any platform.
The open-source social network for AI agents. Post, comment, vote, follow, and build reputation.
Search indexed Discord community discussions via Answer Overflow. Find solutions to coding problems, library issues, and community Q&A that only exist in Discord conversations.
Analyze brands to generate comprehensive brand identity profiles (JSON). Use when the user wants to analyze a brand, create a brand profile, or needs brand data for ad generation. Stores profiles for reuse across Ad-Ready, Morpheus, and other creative workflows. Can list existing profiles and update them.
Build a complete brand identity for a solopreneur business from scratch or refresh an existing one. Covers brand personality, voice and tone, visual identity system (colors, typography, logo direction, imagery style), tagline crafting, and a brand guidelines document. Use when creating a new brand, rebranding, or needing to make brand decisions consistent. Trigger on "create my brand", "brand identity", "brand guidelines", "define my brand voice", "brand personality", "what should my brand look like", "brand strategy", "rebrand", "brand tone".
Automates browser interactions for web testing, form filling, screenshots, and data extraction. Use when the user needs to navigate websites, interact with web pages, fill forms, take screenshots, or extract information from web pages.
| name | skillscanner |
| version | 1.0.0 |
| description | Security scanner for ClawHub skills from Gen Digital. Looks up skill safety via the scan API. |
| author | Rex Shang |
| license | MIT |
| keywords | ["security","audit","scan","vet","skills","safety","skill_scanner","trust","secure"] |
| triggers | ["skill security","vet skill","scan skill","is this skill safe","skillscanner","skill_scanner","audit skill","scan skills","secure skill","trusted skill","trust skill"] |
"Trust, but verify."
SkillScanner checks ClawHub skill safety by calling the scan API. You provide the skill URL; the API returns status and severity. Proceed only when the verdict is SAFE.
Run the lookup with the real skill URL (format: https://clawhub.ai/author/skill-name):
curl --request POST --url "https://ai.gendigital.com/api/scan/lookup" \
--header "Content-Type: application/json" \
--data '{"skillUrl":"https://clawhub.ai/AUTHOR/SKILL_SLUG"}'
Replace AUTHOR with actual author id and SKILL_SLUG with the actual skill identifier from the ClawHub URL.
Interpret the response:
status: "done" — Check the severity field for the verdict.status: "analysis_pending" — The skill is awaiting manual review. Do not treat as safe; advise the user that the skill is pending review.Proceed or advise caution:
severity is SAFE.WARNING, DANGEROUS, MALICIOUS), advise caution and do not recommend using the skill until reviewed or cleared.# Example: scan a skill by its ClawHub URL
curl --request POST --url "https://ai.gendigital.com/api/scan/lookup" \
--header "Content-Type: application/json" \
--data '{"skillUrl":"https://clawhub.ai/author/skill-name"}'
Parse the JSON response: use status and severity as above.
status | Meaning | Action |
|---|---|---|
done | Scan complete | Use severity for verdict (see below). |
analysis_pending | Awaiting manual review | Advise that the skill is not yet cleared; do not treat as SAFE. |
severity (when status = done) | Recommendation |
|---|---|
| SAFE | OK to proceed. |
| Any other value | Advise caution; do not recommend use until reviewed. |
Skills can run code and access your environment. Risks include:
| Risk | Impact |
|---|---|
| Execute arbitrary code | Full system compromise |
| Access your filesystem | Data theft, ransomware |
| Read environment variables | API key theft |
| Exfiltrate data via HTTP | Privacy breach |
| Install malicious dependencies | Supply chain attack |
SkillScanner uses the scan API to help you decide whether to trust a skill before use.
analysis_pending means human review has not yet concluded—treat as “unknown”, not safe.Use alongside sandboxing, least privilege, and manual review when in doubt.
Links: