mirror of
https://github.com/prompt-security/clawsec.git
synced 2026-06-20 00:41:21 +03:00
David Abutbul
f43f792a88
* feat(skills): add clawsec-clawhub-checker reputation checking skill - Adds ClawHub reputation checks to guarded installer - Integrates VirusTotal Code Insight scores - Requires --confirm-reputation for suspicious skills - Enhances advisory guardian hook with reputation warnings - Defense-in-depth layer for skill installation security * feat: add clawsec-clawhub-checker skill - Enhanced guarded installer with reputation checks - VirusTotal Code Insight integration - Reputation scoring (0-100) with multiple signals - New exit code 43 for reputation warnings - Requires --confirm-reputation for suspicious skills - Integration with clawsec-advisory-guardian hook - Standalone skill compatible with dynamic catalog system Note: Removed hardcoded catalog entry to work with new dynamic catalog system (discover_skill_catalog.mjs). * fix: lint errors in clawsec-clawhub-checker - Remove unused imports (fs, os, path) from check_clawhub_reputation.mjs - Remove unused variable in setup_reputation_hook.mjs - Remove unused os import from update_suite_catalog.mjs - All ESLint checks now pass - TypeScript check passes - Build check passes * refactor: remove PR_NOTES.md and update documentation in README.md and SKILL.md feat: add input validation for skill slug and version in check_clawhub_reputation.mjs fix: enhance argument parsing in enhanced_guarded_install.mjs test: add reputation check tests for input validation and output formatting chore: delete unused update_suite_catalog.mjs script * feat: enhance clawsec-clawhub-checker with setup script and reputation checks * feat: integrate reputation checks into clawhub setup script and enhance installer * docs: update README and SKILL documentation to reflect new installer scripts and usage instructions * feat: enhance CLI validation for skill version and reputation threshold; update documentation --------- Co-authored-by: davida-ps <david.a@prompt.security>