clawhub@0.24.1
ClawHub CLI \u2014 install, update, search, and publish skills plus OpenClaw packages.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged capabilities fit the stated CLI purpose: GitHub tokens are used for GitHub API requests, while publishing is an explicit command that requires a source path. The lifecycle script only runs the build, and no unrelated automatic credential flow was found.
Static reason
No blocking static signals were detected.
Trigger
User invokes a CLI command, such as publishing a package or importing from GitHub.
Impact
Expected command functionality; no automatic credential transfer or unrelated action was found.
Mechanism
The CLI may call Git for repository metadata, use GITHUB_TOKEN in GitHub API requests, and write downloaded GitHub archive contents to a temporary directory.
AI rationale
The flagged capabilities fit the stated CLI purpose: GitHub tokens are used for GitHub API requests, while publishing is an explicit command that requires a source path. The lifecycle script only runs the build, and no unrelated automatic credential flow was found.
Evidence
temporary directory prefixed clawhub-github-publish-
Network endpoints3
api.github.comgithub.comclawhub.ai
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The only lifecycle script is prepublishOnly, which runs the package build.
- The CLI dispatches commands from process.argv; package publishing is a command that requires a source path.
- GitHub token use is attached to requests for GitHub repository data.
- Package publishing calculates an inventory digest before resolving a publish token.
Evidence against
- The CLI references child-process execution, network access, environment variables, and filesystem writes.
- GitHub source handling reads GITHUB_TOKEN and uses it in request authorization headers.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/cli/ui.jsView file
1import { spawn } from "node:child_process";
L2: import { stdin } from "node:process";
High
dist/cli/commands/github.jsView file
1import { spawnSync } from "node:child_process";
L2: import { mkdir, mkdtemp, rm, stat, writeFile } from "node:fs/promises";
...
L11: function resolveGitHubApi() {
L12: const testUrl = process.env.CLAWHUB_TEST_GITHUB_API_URL?.trim();
L13: if (process.env.NODE_ENV !== "test" || !testUrl)
L14: return "https://api.github.com";
L15: const url = new URL(testUrl);
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/cli/commands/github.jsView on unpkg · L1dist/schema/clawPackage.js#virtual:normalized:round1View file
Findings
3 High2 Medium7 Low
HighChild Processdist/cli/ui.js
HighSame File Env Network Executiondist/cli/commands/github.js
HighSemantic Analysis Limiteddist/schema/clawPackage.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/cli.js
Affected versions and remediation
This report applies to clawhub@0.24.1.
See all versions of clawhub for other recorded verdicts.
- Review the evidence and your use of clawhub@0.24.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.