clawsec-clawhub-checker

Automate pre-install reputation checks for ClawSec skills using VirusTotal insights.

Updated Feb 23, 2026
One-click install
npx skills add https://github.com/pohlai88/AFENDA-NEXUS --skill clawsec-clawhub-checker
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: clawsec-clawhub-checker
Source: https://github.com/pohlai88/AFENDA-NEXUS/tree/main/.agents/skills/clawsec-clawhub-checker
Command: npx skills add https://github.com/pohlai88/AFENDA-NEXUS --skill clawsec-clawhub-checker

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires clawsec-suite, and includes scripts (resource) components.

What problem does it solve?

Reduces the risk of installing unsafe or dubious skills by performing pre-install reputation checks that combine advisory signals with VirusTotal Code Insight data.

Core Features & Use Cases

  • Intercepts clawhub install requests and evaluates risk before installation
  • Checks VirusTotal Code Insight scores and other signals, including age, updates, and author reputation
  • Requires explicit confirmation for high-risk skills via --confirm-reputation
  • Integrates with the clawsec advisory guardian to provide detailed risk reports during installs

Quick Start

Install the clawsec-suite first, then install clawsec-clawhub-checker and run the setup script to enable reputation checks.

Frequently Asked Questions about clawsec-clawhub-checker

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check VirusTotal reputation scores before installing ClawHub skills?

Checking VirusTotal reputation scores before installing ClawHub skills is done by an automated pre-install reputation checker that intercepts install requests and evaluates risk by combining VirusTotal Code Insight data with advisory signals.

What signals are evaluated during a pre-install reputation check for security tools?

During a pre-install reputation check, the system evaluates multiple signals including VirusTotal Code Insight scores, skill age, update frequency, and author reputation to determine installation risk.

Do I need clawsec-suite to run automated VirusTotal checks on skill installations?

Yes, installing the clawsec-suite is a required prerequisite to run automated VirusTotal checks. The checker integrates with clawsec-suite hooks and environment configuration to properly intercept and evaluate ClawHub install requests.

How do I bypass or confirm high-risk skill installations flagged by reputation checks?

To confirm high-risk skill installations flagged by reputation checks, you must provide explicit confirmation using the designated command line flag. This threshold-based gating mechanism ensures intentional user action for skills failing the multi-layer scoring system.

What is the best way to secure ClawHub workflows against unsafe skill updates?

Securing ClawHub workflows against unsafe skill updates is best achieved by implementing an automated pre-install reputation check that applies multi-layer scoring with threshold-based gating, evaluating new and updated skills from diverse authors before installation.