Skip to content
Back to skills

Clawhub

ASecurity

Search, install, and manage community skills from the ClawHub registry.

  • 29 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added June 11, 2026
toolsshell

Works with

  • terminal
  • cli

Security analysis

A96/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro shows the line behind each finding and how to fix it

Scanned June 11, 2026

npx -y skills add spamsch/son-of-simon --skill clawhub --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Clawhub?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Clawhub
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/spamsch-clawhub/badge)](https://www.skillsdirectory.com/skills/spamsch-clawhub)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
id: clawhub
name: ClawHub
description: Search, install, and manage community skills from the ClawHub registry.
tasks:
  - run_shell_command
  - enrich_skill
essential_tasks: []
examples:
  - "Search ClawHub for a Slack skill"
  - "Install the weather skill from ClawHub"
  - "Install https://clawhub.ai/steipete/slack"
  - "Update all my ClawHub skills"
  - "What skills are available for home automation?"
  - "Show me my installed ClawHub skills"
safe_defaults:
  dir: "~/.macbot/skills"
confirm_before_write:
  - install skill
  - update all skills
enriched: true
---

## Behavior Notes

### ClawHub CLI Commands

ClawHub is an npm-based CLI for discovering and installing agent skills. All commands use `clawhub` in the terminal:

- **Search:** `clawhub search <query>` — find skills by keyword
- **Install:** `clawhub install --dir ~/.macbot/skills <skill-name>` — install a skill
- **List installed:** `clawhub list --dir ~/.macbot/skills` — show installed skills
- **Update:** `clawhub update --dir ~/.macbot/skills` — update all installed skills
- **Info:** `clawhub info <skill-name>` — show skill details before installing

### Important: Always use `--dir ~/.macbot/skills`
Son of Simon loads user skills from `~/.macbot/skills/`. Always pass `--dir ~/.macbot/skills` to install/list/update commands so skills land in the right place.

### If ClawHub Is Not Installed
If the `clawhub` command is not found, install it first:
```
npm install -g clawhub
```

### URL Handling
When the user provides a ClawHub URL like `https://clawhub.ai/steipete/slack`, the slug is the **last** path segment only: `slack` (NOT `steipete/slack` — the first segment is the owner, not part of the slug). Use the short slug:
```
clawhub install --dir ~/.macbot/skills slack
```

### Acting Autonomously
When the user asks to search for or install a skill, just do it. Don't ask for confirmation before searching. Only confirm before installing (since it writes to disk).

### Proactive Discovery
When the user asks about a capability you're unsure about (e.g., "Can you connect to Slack?", "Check my Jira tickets"):
1. **First check if it's already installed**: Run `clawhub list --dir ~/.macbot/skills` to see installed skills. If the skill is already there, read its SKILL.md and use it immediately — don't search ClawHub for something you already have.
2. **If not installed, search ClawHub**: Run `clawhub search <keyword>` to find a community skill. If one is found, tell the user about it and offer to install it.
This turns "I can't do that" into either "You already have that — let me use it" or "I found a skill for that — want me to install it?"

### Install Workflow
1. If given a URL, extract the slug (e.g., `https://clawhub.ai/steipete/slack` → `slack`)
2. `run_shell_command`: `clawhub install --dir ~/.macbot/skills <slug>`
3. Read the installed SKILL.md with `read_file(path="~/.macbot/skills/<slug>/SKILL.md")` so you know what the skill does and can use it immediately in this conversation
4. Tell the user the skill is installed and ready to use
5. Optionally, offer to enrich the skill with `enrich_skill(skill_id="<skill-id>")` for better examples and behavior notes — but this is not required. Skills work immediately after install.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.