OpenClaw/clawhub-security-signals huggingface dataset:
Skill: machiidev/net-scan-education (version 1.0.0)

# Skill: net-scan-education Objective - Provide a safe, educational agent skill focused on learning network scanning concepts (e.g., Nmap) without performing any real scans or accessing external networks. - Emphasize defensive security education, policy compliance, and proper authorization. Scope & Guardrails - Non-operational outputs only: explanations, learning plans, lab setup checklists, and sample prompts. - All actions must be explicitly authorized by a requestor and kept within a controlled lab environment. - Logs and audit trails of prompts and responses are maintained. Interfaces - Invocation: via a chat prompt or command like: explain net-scan basics, provide a learning plan, or generate a lab setup checklist. - Outputs: non-operational text, templates, checklists, and doc generation. Data Model - State: learning progress, last prompt, sample prompts. - Artifacts: generated docs (markdown/text), templates. Testing - Unit tests for plain text outputs and template generation; ensure no sensitive commands or URLs are produced. Publish - Optional: publish to clawhub or keep local for iteration. Test Prompts (examples) - Explain how to safely learn Nmap in a lab without performing any scans. - Generate a 2-week learning plan for network scanning in a controlled environment. - Provide a lab setup checklist for a defensive learning lab.


Security scan verdicts — ClawScan: clean | static analysis:  | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: gingiris/cold-start-playbook (version 1.0.0)

--- name: cold-start-playbook version: 1.0.0 description: "Cold Start Playbook — How to get your first 1000 users. Cold start strategies for startups, apps, and SaaS products. First user acquisition, chicken-and-egg problem solving, and early traction tactics." author: Gingiris tags: - cold start - first users - early traction - user acquisition - startup launch - growth hacking --- # Cold Start Playbook > **This skill redirects to [Gingiris Launch Playbook](https://github.com/Gingiris/gingiris-launch)** Get your first 1000 users. Solve the cold start problem for any product type. 🇨🇳 冷启动完整攻略 | 🇯🇵 コールドスタート | 🇰🇷 콜드 스타트 ## What You Get - Cold start strategies by product type (marketplace, SaaS, app, community) - First 100 users tactics - Chicken-and-egg problem solutions - Early adopter acquisition channels - Manual "do things that don't scale" tactics - Transitioning from cold start to growth ## Quick Start ``` Read the full playbook: https://github.com/Gingiris/gingiris-launch ``` --- Keywords: cold start, cold start problem, first users, early traction, first 1000 users, startup cold start, app cold start, SaaS cold start, user acquisition, chicken and egg


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: kleberbaum/bilanz (version 0.1.0)

--- name: bilanz version: 0.1.0 description: "Austrian-style Bilanz (annual accounts) generator" author: kleberbaum tags: [finance, netsnek] --- # bilanz Prepare Bilanz reports following Austrian UGB standards with Aktiva and Passiva sections. ## Aktiva Overview Use `--aktiva` to access the aktiva overview functionality. ## Passiva Overview Use `--passiva` for the passiva overview view. ## Gewinn- und Verlustrechnung Run `scripts/bilanz-check.sh --status` to display metadata and copyright. ## UGB Compliance Additional compliance and validation features are planned for future releases. ## License Copyright (c) 2026 Netsnek e.U. All rights reserved. Website: https://netsnek.com

path: claw.json
content: {
  "name": "bilanz",
  "version": "0.1.0",
  "description": "Austrian-style Bilanz (annual accounts) generator",
  "author": "kleberbaum",
  "license": "MIT",
  "permissions": ["exec"],
  "scripts": {
    "main": "scripts/bilanz-check.sh"
  }
}


path: README.md
content: # bilanz

Austrian-style Bilanz (annual accounts) generator

## Quick Start

```bash
# Show info
./scripts/bilanz-check.sh --status

# Primary report
./scripts/bilanz-check.sh --aktiva

# Secondary report
./scripts/bilanz-check.sh --passiva
```

## About

Part of the Netsnek e.U. skill collection.

Website: https://netsnek.com


path: scripts/bilanz-check.sh
content: #!/bin/bash
set -e

FLAG="${1:---status}"

case "$FLAG" in
  --aktiva)
    echo "=== Aktiva (Vermoegenswerte) ==="
    echo "A. Anlagevermoegen"
    echo "   I.  Immaterielle Vermoegensgegenstaende ... 0,00"
    echo "   II. Sachanlagen ........................... 0,00"
    echo "   III.Finanzanlagen ......................... 0,00"
    echo "B. Umlaufvermoegen"
    echo "   I.  Vorraete .............................. 0,00"
    echo "   II. Forderungen ........................... 0,00"
    echo "   III.Kassenbestand, Bankguthaben ........... 0,00"
    echo "Summe Aktiva ................................. 0,00"
    ;;
  --passiva)
    echo "=== Passiva (Kapital + Schulden) ==="
    echo "A. Eigenkapital"
    echo "   I.  Stammkapital .......................... 0,00"
    echo "   II. Gewinnruecklagen ...................... 0,00"
    echo "B. Rueckstellungen ........................... 0,00"
    echo "C. Verbindlichkeiten"
    echo "   I.  Verbindlichkeiten gg. Kreditinstituten  0,00"
    echo "   II. Lieferantenverbindlichkeiten .......... 0,00"
    echo "Summe Passiva ................................ 0,00"
    ;;
  --status)
    echo "Bilanz Skill v0.1.0"
    echo "Copyright (c) 2026 Netsnek e.U."
    echo "Austrian UGB annual accounts generator."
    echo "Website: https://netsnek.com"
    ;;
  *)
    echo "Unknown flag: $FLAG"
    echo "Usage: bilanz-check.sh [--aktiva|--passiva|--status]"
    exit 1
    ;;
esac

Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: amandaclarke61/toybridge (version 1.0.0)

--- name: toybridge description: Control any BLE toy that has been reverse-engineered and connected via the ToyBridge server. Calls a local HTTP API to send vibrate/stop commands. Requires the ToyBridge server running on the same machine. metadata: {"openclaw": {"os": ["darwin"]}} --- # ToyBridge — Universal BLE Toy Control Control **any BLE toy** through OpenClaw, as long as you have the [ToyBridge](https://github.com/AmandaClarke61/toybridge) server running. This skill is for devices that are **not supported by Buttplug.io/Intiface** — devices with proprietary or unknown protocols that you've reverse-engineered yourself using the ToyBridge toolkit. > If your device IS supported by Buttplug.io, use the `intiface-control` skill instead — it's easier. --- ## Prerequisites 1. You've reverse-engineered your device's BLE protocol using [ToyBridge](https://github.com/AmandaClarke61/toybridge) 2. You've configured `4-bridge/ble_worker.py` for your device 3. The ToyBridge server is running: `uv run 4-bridge/server.py` See the [full setup guide](https://github.com/AmandaClarke61/toybridge) for step-by-step instructions. --- ## Commands the agent will use ### Vibrate at intensity ```bash curl -s -X POST http://host.docker.internal:8888/vibrate \ -H "Content-Type: application/json" \ -d '{"intensity": 60}' ``` `intensity`: 0–100 (0 = stop) ### Stop immediately ```bash curl -s -X POST http://host.docker.internal:8888/stop ``` ### Check status ```bash curl -s http://host.docker.internal:8888/status ``` > If OpenClaw runs natively (not in Docker), replace `host.docker.internal` with `localhost`. --- ## Intensity guide | Range | Feel | |--------|---------| | 1–20 | Gentle | | 30–50 | Medium | | 60–80 | Strong | | 90–100 | Maximum | --- ## Preset patterns | Pattern | What it does | |---------|-------------| | `pulse` | Bursts of 80%, 5 times | | `wave` | Ramp up 20→100%, then back down, x2 | | `tease` | 30% → 70% → 100%, escalating, then stop | To run a pattern: ```bash curl -s -X POST http://host.docker.internal:8888/vibrate \ -H "Content-Type: application/json" \ -d '{"pattern": "wave"}' ``` --- ## Agent rules - Always stop (intensity 0) after a timed session unless user says to keep going - Do **not** use the `notify` tool — use `bash` with `curl` - Replace `host.docker.internal` with `localhost` if OpenClaw is not in Docker --- ## Troubleshooting | Problem | Fix | |---------|-----| | `connection refused` | Make sure `uv run 4-bridge/server.py` is running | | Device doesn't respond | Check your device config in `ble_worker.py` | | Wrong intensity | Values are clamped to 0–100 |


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: lexomis/edge (version v4478.0.0)

--- name: edge description: > Use when user asks about crypto tokens, trading, portfolios, or price alerts. --- # Edge Tools via `edge` MCP server (6 tools, 39 actions): - **intelligence**: search tokens, screen by filters, list top tokens, trending swaps - **tokens**: token details, pricing, top holders, top traders, dev tokens (sniper/insider flags) - **pairs**: pair metrics, OHLCV candles, swaps, pair info - **wallet**: holdings, swaps, PnL history, summary - **orders**: `place_limit_order`, `place_spot_order`, list/cancel orders, entry/exit strategies - **agent**: encrypted wallet management for the non-custodial flow ## Patterns 1. **Price before order**: `pairs pair_metrics` to compute target, then `orders place_limit_order` 2. **Token to pair**: `tokens token_info_with_pricing` returns `pairContractAddress` 3. **Chain IDs**: `8453` Base, `1` Ethereum, `42161` Arbitrum, `"solana"` Solana 4. **Alerts**: configure in the Edge webapp (Settings > Alerts); deliver to webhook, Redis, or Telegram [Docs](https://edge-trade.gitbook.io/agents)


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal:  | SkillSpector: suspicious (MEDIUM)
Skill: edwardrodriguez703-design/book-inspection (version 1.0.1)

--- name: book-inspection description: Book inspection services through Lokuli MCP. Use when user needs to find and book inspection. Triggers on requests like "book a inspection", "find inspection near me", or any inspection service request. --- # uook inspection Book inspection services through Lokuli's MCP server. ## MCP Endpoint ``` https://lokuli.com/mcp/sse ``` Transport: SSE | JSON-RPC 2.0 | POST requests ## Tools ### search ```json { "method": "tools/call", "params": { "name": "search", "arguments": { "query": "inspection", "zipCode": "90640", "maxResults": 20 } } } ``` ### check_availability ```json { "method": "tools/call", "params": { "name": "check_availability", "arguments": { "providerId": "xxx", "serviceId": "yyy", "date": "2025-02-10" } } } ``` ### create_booking ```json { "method": "tools/call", "params": { "name": "create_booking", "arguments": { "providerId": "xxx", "serviceId": "yyy", "timeSlot": "2025-02-10T14:00:00-08:00", "customerName": "John Doe", "customerEmail": "[REDACTED_SECRET]", "customerPhone": "+13105551234" } } } ```


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (MEDIUM)
Skill: chopinau/amazon-asin-analysis (version 1.0.4)

# Novai360 智能市场分析 v1.0 联系官方：VX: chaibusiness ## 描述 Novai360 提供的专业跨境电商智能分析服务，基于先进的 AI 技术和真实的实时市场数据，为卖家提供深度市场洞察、竞品分析、关键词优化等专业建议。 ## 功能 - 真实的市场数据获取（包含销售数据） - AI 智能分析报告生成 - 19 种专业分析维度 - 竞品深度对比 - 关键词热度追踪 - 类目标目趋势预测 - 产品表现评估 - 价格策略建议 ## 使用方法 1. 输入您的产品或市场问题 2. 系统将自动识别意图并调用相关分析工具 3. 返回专业的分析框架和数据摘要 ## API 端点 - **POST /chat** - 智能分析 - **GET /skills** - 获取可用分析工具列表 - **GET /health** - 服务状态检查 ## 示例 **输入:** ``` 帮我分析指压垫的市场前景 ``` **输入:** ``` B0BG6N7W91 这个产品怎么样 ``` **输入:** ``` 搜索 acupressure mat 的关键词趋势 ``` ## 限制 - 每位用户每日可免费使用 10 次专业分析 - 全球高速访问 - 无需 API Key，直接使用 ## 安全与认证 - **API 认证**: 无需 API Key，直接使用 - **数据隐私**: - 所有查询数据均经过加密处理 - 严格保护用户隐私 - 符合国际数据保护标准 ## 安装说明 1. 直接安装技能到 ClawHub 2. 开始使用


Security scan verdicts — ClawScan: suspicious | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)
Skill: jiwenbing/risk-profile (version 1.0.0)

--- name: risk-profile version: 1.0.0 description: Assess a user's personal risk profile to identify their biggest financial, health, and lifestyle risks and recommend appropriate insurance and protection strategies. Use when users want to understand their risk exposure or are starting their insurance planning. --- # Risk Profile Evaluate a user's personal risk exposure across health, financial, and lifestyle dimensions. Generate a risk profile report and recommend prioritized insurance and protection strategies. ## When to Use - User wants to understand their personal risks - User is starting insurance planning from scratch - User asks "what risks should I be protecting against?" - User wants to prioritize which insurance to buy first - User has had a major life event and wants to reassess risk ## How to Use 1. Conduct a risk assessment questionnaire: age, health status, job type, dependents, assets, debts, lifestyle habits 2. Score risks across categories: mortality, morbidity (illness/disability), property, liability, income disruption 3. Generate a risk profile with high/medium/low ratings per category 4. Map risks to appropriate insurance solutions 5. Prioritize by impact × probability 6. Provide a phased protection plan based on budget ## Examples - "Help me figure out what risks I should be insuring against" - "I'm a freelancer with no employer benefits, what's my risk profile?" - "I just had a baby, what risks do I now need to protect against?"


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: grahammccain/chart-library (version 1.0.0)

--- name: chart-library summary: Visual chart pattern search — find similar historical stock charts and see what happened next tags: [finance, investing, technical-analysis, stock-market, charts] author: chartlibrary homepage: https://chartlibrary.io api_base: https://chartlibrary.io requires: - url: https://chartlibrary.io/api/v1/status --- # Chart Library Find historically similar stock chart patterns from 24M+ embeddings across 15K+ symbols and 10 years of data. See what happened next — 1, 3, 5, and 10-day forward returns with AI summaries. ## Usage Ask your agent: - "Find charts similar to AAPL on 2024-06-15" - "What are today's most interesting chart patterns?" - "Analyze TSLA's 3-day chart vs historical analogs" ## API Endpoints - `POST /api/v1/analyze` — Complete analysis in one call (recommended) - `POST /api/v1/search/text` — Search for similar patterns - `POST /api/v1/search/batch` — Multi-symbol search - `GET /api/v1/discover/picks` — Today's top patterns - `POST /api/v1/follow-through` — Forward return computation - `POST /api/v1/summary` — AI summary generation - `GET /api/v1/status` — Database stats ## Auth No API key required for free tier (100 req/day). For higher limits, get a key at [chartlibrary.io/developers](https://chartlibrary.io/developers). ## Links - [OpenAPI spec](https://chartlibrary.io/api/openapi.json) - [AI plugin manifest](https://chartlibrary.io/.well-known/ai-plugin.json) - [MCP server](https://github.com/grahammccain/chart-library-mcp)


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: leocryptoflow/gaozhou (version 1.0.0)

# GaoZhou - 高州市 > 🍒 中国荔乡 · 冼夫人故里 · 粤西明珠 ## 基本信息 | 项目 | 内容 | |------|------| | 📍 位置 | 广东省茂名市代管县级市 | | 📐 面积 | 3276 平方公里 | | 👥 人口 | 约 180 万 | | 🗣️ 方言 | 粤语-高州话 | | 🌡️ 气候 | 亚热带季风气候 | ## 🍒 中国荔乡 高州是**世界荔枝之乡**，种植荔枝历史超过 **2000 年**。 ``` ┌─────────────────────────────────────────┐ │ 🍒 高州荔枝 · 天下闻名 │ ├─────────────────────────────────────────┤ │ "一骑红尘妃子笑，无人知是荔枝来" │ │ —— 唐朝贡品，杨贵妃最爱 │ └─────────────────────────────────────────┘ ``` ### 荔枝之最 - 🌳 **贡园** — 唐朝皇家贡园，千年古荔枝树群 - 📍 位于根子镇柏桥村，国内最著名的古树荔枝园 - 🏆 全球每五颗荔枝，就有一颗来自茂名 - 💰 荔枝产业年产值超百亿元 ### 知名品种 | 品种 | 特点 | |------|------| | 白糖罂 | 皮薄肉厚，清甜如蜜 | | 桂味 | 肉质爽脆，桂花香气 | | 妃子笑 | 核小肉多，果大饱满 | | 白蜡 | 果肉晶莹，入口化渣 | ## 👸 冼夫人故里 高州是**岭南圣母冼夫人**的故乡。 ### 冼夫人简介 - 南北朝至隋朝时期的杰出政治家、军事家 - 历经三朝，维护国家统一和民族团结 - 被周恩来总理誉为"中国巾帼英雄第一人" - 庙宇遍布粤西及东南亚地区 ### 相关景点 - 🏛️ **冼太庙** — 全国重点文物保护单位 - 🎭 **冼夫人文化节** — 每年农历十一月举办 - 📚 **冼夫人纪念馆** — 了解巾帼英雄生平 ## 🏞️ 旅游景点 ### 自然风光 | 景点 | 简介 | |------|------| | 🏔️ 笔架山 | 高州城区地标，登高览全城 | | 🌊 高州水库 | 粤西第一大水库，碧波万顷 | | 🌳 根子贡园 | 千年古荔枝园，世外桃源 | | 🏝️ 仙人洞 | 溶洞奇观，钟乳石林立 | ### 人文古迹 - 🏛️ 高州府学宫（孔庙） - 🏯 宝光塔（明代古塔） - 🏘️ 高州古城墙遗址 - ⛩️ 观山寺 ## 🍜 特色美食 ``` ┌──────────────────────────────────┐ │ 🍜 高州美食地图 │ ├──────────────────────────────────┤ │ 🥟 薯包籺 🍖 东岸豆饼鸡 │ │ 🍲 簸箕炊 🥩 高州烧猪 │ │ 🍢 煎堆 🦐 电白蚝 │ │ 🍮 艾籺 🍒 荔枝干/龙眼干 │ └──────────────────────────────────┘ ``` ### 必尝美食 - **薯包籺** — 番薯粉包裹馅料，Q弹爽口 - **簸箕炊** — 米浆蒸制，配蒜蓉酱油 - **东岸豆饼鸡** — 豆腐皮包鸡，香脆可口 - **艾籺** — 艾草糯米糕，清香软糯 ## 🚗 交通指南 ### 到达高州 | 方式 | 路线 | |------|------| | ✈️ 飞机 | 揭阳潮汕机场 / 湛江机场 → 高州 | | 🚄 高铁 | 茂名站 / 茂名西站 → 转乘大巴 | | 🚌 大巴 | 广州、深圳、珠海直达高州 | | 🚗 自驾 | 沈海高速 / 包茂高速 | ### 市内交通 - 公交线路覆盖主城区 - 出租车、网约车便捷 - 乡镇班车通达各村 ## 📅 最佳游览时间 | 季节 | 推荐活动 | |------|----------| | 🌸 春季 (3-4月) | 荔枝花开，赏花踏青 | | 🍒 夏季 (5-7月) | **荔枝季**，采摘品尝 | | 🍂 秋季 (9-11月) | 龙眼成熟，气候宜人 | | ❄️ 冬季 (12-2月) | 冼夫人文化节 | ## 📞 实用信息 - 🏛️ 区号：0668 - 📮 邮编：525200 - 🌐 政府网站：www.gaozhou.gov.cn --- **高州** — 千年荔乡，好心高凉 🍒 > "高凉古郡，好心茂名" — 欢迎来到荔枝的故乡！

path: package.json
content: {
  "name": "gaozhou",
  "version": "1.0.0",
  "description": "高州市 - 中国荔乡 · 冼夫人故里 · 粤西明珠",
  "keywords": [
    "gaozhou",
    "maoming",
    "guangdong",
    "lychee",
    "travel",
    "高州",
    "茂名",
    "广东",
    "荔枝",
    "冼夫人",
    "旅游"
  ],
  "author": "LeoCryptoFlow",
  "license": "MIT",
  "openclaw": {
    "skill": true,
    "category": "travel",
    "languages": ["zh", "en"],
    "acceptLicenseTerms": true
  }
}


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: sakilmostak/pm-dashboard (version 1.0.1)

--- name: pm-dashboard description: Real-time dashboard for visualizing AI agent project states including implementation progress, decision trees, and test results. Use when setting up project visualization, checking project status, or managing the dashboard lifecycle. Commands: install, start, stop, status, config, export, import. metadata: clawdbot: emoji: "📊" --- # PM Dashboard Real-time visualization for AI agent project states. ## Installation **Via npm:** ```bash npm install -g @reghoul/pm-dashboard pm-dashboard init pm-dashboard start ``` **Via ClawHub:** ```bash clawhub install pm-dashboard pm-dashboard init pm-dashboard start ``` ## CLI Commands | Command | Description | |---------|-------------| | `pm-dashboard start` | Start the server | | `pm-dashboard stop` | Stop the server | | `pm-dashboard status` | Show status and config | | `pm-dashboard config get <key>` | Get config value | | `pm-dashboard config set <key> <value>` | Set config value | | `pm-dashboard export -o <file>` | Export state | | `pm-dashboard import <file>` | Import state | ## State Location All user state is preserved in `~/.openclaw/pm-dashboard/`: - `config.json` - User configuration - `state.db` - SQLite database - `logs/` - Server logs ## Updates **Via npm:** ```bash npm update -g @reghoul/pm-dashboard ``` **Via ClawHub:** ```bash clawhub update pm-dashboard ``` Updates preserve all user state in `~/.openclaw/pm-dashboard/`.


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)
Skill: patrickshuff/clawmail-xyz (version 1.0.0)

--- name: clawmail description: Email service for AI agents with wallet authentication and crypto payments metadata: openclaw: emoji: "📧" bins: - node - npx os: - darwin - linux - win32 install: npm: clawmail homepage: https://clawmail.xyz capabilities: - email - mcp - wallet-auth - x402 --- # ClawMail Email infrastructure for AI agents at **clawmail.xyz**. ## What it does ClawMail provides email addresses for LLMs and AI agents with: - **Wallet-based authentication** - No passwords, use Ethereum wallet signatures (EIP-191) - **x402 crypto payments** - Pay with USDC on Base mainnet - **MCP integration** - Direct tool access via Model Context Protocol - **Free tier available** - Random email addresses with 1000 message limit ## Pricing | Tier | Cost | Features | |------|------|----------| | Free | $0 | Random email address, 1000 messages | | Paid | $1 USDC | Custom email address, unlimited messages | ## MCP Tools This skill provides 5 tools for email management: ### `check_mailbox_availability` Check if an email address is available for registration. ```json { "address": "myagent" } ``` ### `login` Authenticate using wallet signature. Returns a session token. ```json { "address": "[REDACTED_SECRET]", "walletAddress": "0x...", "signature": "0x...", "message": "Sign in to ClawMail..." } ``` ### `list_messages` List messages in your inbox. ```json { "address": "myagent", "token": "jwt-token", "limit": 50, "unreadOnly": false } ``` ### `read_message` Read a specific message by ID. Marks it as read. ```json { "address": "myagent", "messageId": "uuid", "token": "jwt-token" } ``` ### `delete_message` Delete a message from your inbox. ```json { "address": "myagent", "messageId": "uuid", "token": "jwt-token" } ``` ## Usage ### Via npx (recommended) ```bash npx clawmail ``` ### Install globally ```bash npm install -g clawmail clawmail ``` ### Configure in Claude Desktop Add to your `claude_desktop_config.json`: ```json { "mcpServers": { "clawmail": { "command": "npx", "args": ["clawmail"] } } } ``` ## API Endpoints The REST API is available at `https://clawmail.xyz`: | Endpoint | Method | Description | |----------|--------|-------------| | `/health` | GET | Health check | | `/api/mailbox/available/:address` | GET | Check availability | | `/api/mailbox` | POST | Create mailbox (x402 protected) | | `/api/auth/challenge` | GET | Get login challenge | | `/api/auth/login` | POST | Authenticate with wallet | | `/api/messages` | GET | List messages | | `/api/messages/:id` | GET | Read message | | `/api/messages/:id` | DELETE | Delete message | ## Authentication Flow 1. Get a challenge: `GET /api/auth/challenge` 2. Sign the challenge with your Ethereum wallet (EIP-191 personal_sign) 3. Submit signature: `POST /api/auth/login` 4. Use the returned JWT token for subsequent requests ## Links - Website: https://clawmail.xyz - Source: https://github.com/patrickshuff/clawmail


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)