Skill: piuaibot-stack/clawhub-integration (version 1.0.0)

--- name: clawhub-integration description: Use when browsing, searching, installing, or publishing skills to ClawHub (OpenClaw skill registry). ClawHub is like npm for AI agent skills. version: 1.0.0 author: Kintama license: MIT metadata: hermes: tags: [clawhub, openclaw, skills, registry, publish, install] related_skills: [clawdwork-jobs, claw-earn-tasks] --- # ClawHub Integration ClawHub (clawhub.ai) is the skill registry for OpenClaw agents — like npm but for AI agent skills. ## Base URL ``` https://clawhub.ai/api/v1 ``` ## Authentication - Token format: `clh_<token>` as Bearer token - Generate token: Login at clawhub.ai → Settings → API Tokens - Store in env: `CLAWHUB_TOKEN=clh_xxx` - Validate: `GET /api/v1/whoami` ```bash curl -H "Authorization: Bearer $CLAWHUB_TOKEN" https://clawhub.ai/api/v1/whoami ``` ## Security Considerations When working with API tokens, especially in automated environments or with AI agents, be aware of the following security considerations: 1. **Token Storage**: Never store tokens directly in scripts or commands. Use environment variables or secure credential storage. 2. **Secure Token Usage**: ```bash # Read token from secure file or environment variable TOKEN=$(cat ~/.secure/clawhub_token) curl -H "Authorization: Bearer $TOKEN" https://clawhub.ai/api/v1/whoami # Or use environment variable curl -H "Authorization: Bearer $CLAWHUB_TOKEN" https://clawhub.ai/api/v1/whoami ``` 3. **Security Scanning**: Many environments now scan for exposed credentials. If you encounter security warnings: - Do not bypass security checks - Use proper credential management practices - Store tokens in secure files with restricted permissions (chmod 600) - Use credential helpers when available 4. **Token Permissions**: Ensure your token has only the minimum required permissions for the tasks you need to perform. ## Search Skills (No auth needed) ```bash # Search by keyword curl "https://clawhub.ai/api/v1/search?q=github+automation" # List all skills curl "https://clawhub.ai/api/v1/skills" # Get specific skill curl "https://clawhub.ai/api/v1/skills/{slug}" # Download skill curl "https://clawhub.ai/api/v1/download?slug=my-skill" -o skill.zip ``` ## Install via CLI ```bash # Install clawhub pip install clawhub # or: npm i -g clawhub # Login clawhub login # browser OAuth via GitHub clawhub login --token clh_xxx # headless token login # Browse & Install clawhub search "calendar" # search by keyword clawhub explore # list recently updated clawhub inspect <slug> # preview before install clawhub install <slug> # download and install clawhub list # show installed skills clawhub update [slug] # update skill clawhub uninstall <slug> # remove skill ``` ## Publish a Skill ```bash # Via CLI clawhub skill publish ./my-skill-folder # Via API (multipart form) curl -X POST https://clawhub.ai/api/v1/skills \ -H "Authorization: Bearer $CLAWHUB_TOKEN" \ -F "slug=my-skill" \ -F "version=1.0.0" \ -F "files[]=@SKILL.md" ``` ## SKILL.md Format for Publishing ```yaml --- name: skill-name description: What this skill does and when to use it version: 1.0.0 author: Kintama license: MIT metadata: hermes: tags: [tag1, tag2] related_skills: [other-skill] required_env: - API_KEY required_binaries: - python3 --- # Skill Name Content here... ``` ## Rate Limits - Anonymous: 180 reads/min, 45 writes/min - Authenticated: 900 reads/min, 180 writes/min ## Environment Variables ``` CLAWHUB_TOKEN=clh_xxx # API token CLAWHUB_REGISTRY= # Override registry URL (optional) CLAWHUB_DISABLE_TELEMETRY=1 # Disable tracking ```


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)