clawsec-clawhub-checker

What problem does it solve?

Reduces the risk of installing unsafe or dubious skills by performing pre-install reputation checks that combine advisory signals with VirusTotal Code Insight data.

Core Features & Use Cases

• Intercepts clawhub install requests and evaluates risk before installation
• Checks VirusTotal Code Insight scores and other signals, including age, updates, and author reputation
• Requires explicit confirmation for high-risk skills via --confirm-reputation
• Integrates with the clawsec advisory guardian to provide detailed risk reports during installs

Quick Start

Install the clawsec-suite first, then install clawsec-clawhub-checker and run the setup script to enable reputation checks.