SClawHub

SClawHub is an independent, open-source security scanner designed specifically for analyzing ClawHub skills. Addressing the need for transparency and safety within the ClawHub ecosystem, it provides automated security assessments and AI-powered reviews to identify potential threats in skill code. The platform evaluates risks such as malware, credential theft, network calls, and code execution vulnerabilities, assigning each scanned skill a trust score between 0 and 100, accompanied by detailed security reports.

The tool operates by allowing users to scan ClawHub skill URLs simply by substituting the original domain with SClawHub’s, making it accessible for those familiar with ClawHub’s structure. SClawHub leverages both Semgrep and Claude AI for its security analysis, combining static code scanning with AI-driven insights. Users can browse existing security reports for over two dozen scanned skills, helping developers and the community make informed decisions about the safety of specific skills.

SClawHub offers a Chrome extension to integrate its security scanning capabilities directly into the browser, further streamlining access to reports and real-time analysis. The service is entirely free to use and is distributed under the MIT License, encouraging community contributions, audits, and forks. ai or OpenClaw and is developed independently by Mladjan Antic.

As an open-source platform focused on security and transparency, SClawHub invites developers and users to participate in its ongoing improvement. Its combination of automated and AI-driven scanning positions it as a specialized tool for enhancing trust and safety in the ClawHub skill ecosystem.