feat: add clawsec-clawhub-checker skill

- Enhanced guarded installer with reputation checks
- VirusTotal Code Insight integration
- Reputation scoring (0-100) with multiple signals
- New exit code 43 for reputation warnings
- Requires --confirm-reputation for suspicious skills
- Integration with clawsec-advisory-guardian hook
- Standalone skill compatible with dynamic catalog system

Note: Removed hardcoded catalog entry to work with new
dynamic catalog system (discover_skill_catalog.mjs).
This commit is contained in:
David Abutbul
2026-02-16 19:36:38 +02:00
parent 777ff98d63
commit 50a2d5fb8c
+7 -13
View File
@@ -1,6 +1,6 @@
{
"name": "clawsec-suite",
"version": "0.0.10",
"version": "0.1.2",
"description": "ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills.",
"author": "prompt-security",
"license": "MIT",
@@ -120,6 +120,11 @@
"required": true,
"description": "Two-step confirmation installer with signature verification that blocks risky skill installs"
},
{
"path": "scripts/discover_skill_catalog.mjs",
"required": true,
"description": "Dynamic skill-catalog discovery with remote index fetch and suite-local fallback metadata"
},
{
"path": "scripts/sign_detached_ed25519.mjs",
"required": false,
@@ -206,17 +211,6 @@
"clawdbot",
"other"
]
},
"clawsec-clawhub-checker": {
"description": "ClawHub reputation checker - enhances guarded installer with VirusTotal scores",
"default_install": false,
"compatible": [
"openclaw",
"moltbot",
"clawdbot",
"other"
],
"note": "Requires clawsec-suite as base"
}
}
},
@@ -247,4 +241,4 @@
"update skills"
]
}
}
}