skill-security-guideSecurity best practices guide for passing ClawHub security scans with "Benign" ratings. Use when creating or reviewing skills to ensure they meet security st...
Install via ClawdBot CLI:
clawdbot install wszhhx/skill-security-guideGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Calls external URL not in known-safe list
https://clawhub.ai/docs/securityAudited Apr 18, 2026 · audit v1.0
Generated Mar 21, 2026
Developers creating new skills for the ClawHub AI agent ecosystem use this guide to ensure their code passes security scans. They follow the metadata formatting rules, implement secure coding practices, and verify documentation consistency before submission.
Security teams or compliance officers review existing skills on ClawHub to identify vulnerabilities like disabled SSL verification or sensitive data leaks. They use the checklist to audit skills and recommend fixes to maintain platform integrity.
Training programs or bootcamps teaching AI skill development incorporate this guide as a curriculum module. Students learn to avoid common pitfalls like YAML metadata errors and doc-code mismatches through hands-on exercises.
Developers integrating external APIs (e.g., Tavily search) into ClawHub skills follow the guide to securely handle credentials via environment variables and accurately document response structures to prevent behavioral mismatches.
Quality assurance teams at ClawHub use this guide to standardize skill reviews, ensuring all uploaded skills meet security benchmarks. They run pre-submission checks and validate fixes for skills marked as suspicious.
Offer consulting services to businesses or developers needing help creating secure ClawHub skills. Charge per skill for security reviews, metadata fixes, and compliance audits to ensure benign ratings.
Develop and sell a tool that automates the pre-submission checks outlined in the guide, such as metadata format validation and SSL verification scanning. Provide detailed reports to help developers self-audit.
Create online courses or certification programs focused on secure AI skill development for ClawHub. Include modules on metadata standards, code security, and documentation practices, with revenue from course fees.
💬 Integration Tip
Integrate the security checklist into your CI/CD pipeline to automatically validate skills before deployment, reducing manual review effort.
Scored Jun 19, 2026
Control desktop applications on Windows — launch, close, focus, resize, move windows, simulate keyboard/mouse input, manage processes, control VSCode, read clipboard, and capture screen info. Use when the user wants to interact with any running program, switch windows, type text, press shortcuts, open files in VSCode, manage running processes, or get system display information.
Conduct rigorous, adversarial code reviews with zero tolerance for mediocrity. Use when users ask to "critically review" my code or a PR, "critique my code", "find issues in my code", or "what's wrong with this code". Identifies security holes, lazy patterns, edge case failures, and bad practices across Python, R, JavaScript/TypeScript, SQL, and front-end code. Scrutinizes error handling, type safety, performance, accessibility, and code quality. Provides structured feedback with severity tiers (Blocking, Required, Suggestions) and specific, actionable recommendations.
Coding style memory that adapts to your preferences, conventions, and patterns for consistent coding.
Pragmatic coding standards for writing clean, maintainable code — naming, functions, structure, anti-patterns, and pre-edit safety checks. Use when writing new code, refactoring existing code, reviewing code quality, or establishing coding standards.
Claude Code integration for OpenClaw. This skill provides interfaces to: - Query Claude Code documentation from https://code.claude.com/docs - Manage subagents and coding tasks - Execute AI-assisted coding workflows - Access best practices and common workflows Use this skill when users want to: - Get help with coding tasks - Query Claude Code documentation - Manage AI-assisted development workflows - Execute complex programming tasks
Plan, draft, version, and refine written content with enforced versioning and quality audits.