BB → stable

Clawhub Skill Scanner (clawhub-skill-scanner)

Name: Clawhub Skill Scanner skill trust rating BB
Item: Clawhub Skill Scanner
Rating: BB
Author: Agent Economy Report

Trend stable: 38 downloads in the last 7 days vs 32 in the 7 before (+19%). The trend is not the direction of the rating.

below the trust line (BBB): unproven adoption, young, or flagged instructions.

Security gatekeeper for skill installations. MANDATORY before installing any skill from ClawHub, GitHub, or external sources. Performs deep code analysis to detect malicious patterns, credential access, data exfiltration, command injection, and other security risks. Triggers: "install skill", "clawh

Signals

Downloads	3,077 (7d: +38)
Installs · stars · versions	109 · 1 · 1
Track record	266 days in the registry
Author	amir-ag
Requires	none declared
Instructions read	yes: payees, wallets and shell patterns extracted from SKILL.md

Flags

PIPE_SHELL: instructs the agent to pipe a download straight into a shell
OBFUSCATED: contains encoded blobs or eval-style execution

Who it pays (x402 counterparties found in its instructions)

service	service rating	wallet
No payee found in its instructions.

Install

openclaw skills install @amir-ag/clawhub-skill-scanner · registry page

For agents

Free JSON: https://agenteconomy.report/k/clawhub-skill-scanner.json · badge: https://agenteconomy.report/k/clawhub-skill-scanner.svg · paid record via x402: GET https://agenteconomy.report/api/skill/clawhub-skill-scanner (US$ 0.005). Check any skill before installing it with the x402-trust-check skill.

Code audit

No independent code audit of this skill yet. Audits are made at the Report's own initiative and are not sold (policy); the ones published are at /k/audited.

How this is computed

Adoption (downloads relative to the registry, 7-day velocity, installs), maturity (age, release cadence, stars, author portfolio), inherited payment trust (every host or wallet the skill's instructions pay is looked up in the x402 service trust index; paying a rated service inherits its tier, an unknown hard-coded wallet is flagged) and hygiene (registry moderation verdict, license, declared setup, origin). Flags cap the tier, they never add to it. Trust line at BBB. Rating as of 2026-10-30.