ClawHub
Code Pluginsource linkedVerified

Bravev2026.7.1

OpenClaw Brave Search provider plugin for web search.

@openclaw/brave-plugin·runtime brave·by @openclaw
openclaw plugins install clawhub:@openclaw/brave-plugin
Latest release: v2026.7.1Download zip

Compatibility

Built With Open Claw Version
2026.7.1
Min Gateway Version
>=2026.4.10
Plugin Api Range
>=2026.7.1
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The artifacts describe a CLI for installing, updating, searching, scanning, validating, publishing, downloading, and managing ClawHub skills and OpenClaw packages; the reviewed capabilities fit that registry-management purpose.
ℹ
Instruction Scope
Some commands can publish, delete, transfer, or configure trusted-publisher metadata, but they are explicit user-invoked CLI actions, generally require authentication, and destructive operations use confirmation or --yes.
✓
Install Mechanism
The package metadata exposes CLI binaries and build/publish scripts but shows no install-time postinstall/preinstall execution in the package being published.
ℹ
Credentials
Filesystem writes to skill folders, lock/origin metadata, report outputs, downloaded artifacts, and network access to the ClawHub registry or GitHub are expected for this CLI; install telemetry is limited and opt-out via environment variable.
ℹ
Persistence & Privilege
The CLI persists an API token in a user config file with restricted permissions and stores local lock/origin metadata; no hidden autostart, background worker, or unrelated persistence was found.
Scan Findings in Context
[VirusTotal telemetry] expected: Telemetry was clean with 0 malicious and 0 suspicious engines, supporting but not determining the benign verdict.
[SkillSpector findings] expected: No SkillSpector findings were supplied.
[Publisher context] expected: The package is from the trusted OpenClaw publisher context, and artifact behavior is consistent with a ClawHub/OpenClaw package-management CLI.
[Artifact review] expected: Reviewed metadata and CLI source show disclosed registry, package, skill, auth, scan, and validation workflows without artifact-backed deception, exfiltration, or hidden automatic execution.
Assessment
Install only if you want a CLI that can manage ClawHub skills and OpenClaw packages. Treat the stored ClawHub token like a credential, review package or skill contents before publishing or installing, and be careful with delete, transfer, trusted-publisher, and runtime validation flags because those actions can affect registry state or execute plugin code when explicitly requested.

Verification

Tier
source linked
Scope
artifact only
Summary
Validated package structure and linked the release to source metadata.
Source
github.com/openclaw/openclaw
Commit
2d2ddc43d0dc
Tag
refs/tags/v2026.7.1
Provenance
No
Scan status
clean

Tags

alpha
2026.5.19-alpha.1
beta
2026.7.2-beta.3
latest
2026.7.1

@openclaw/brave-plugin

Official Brave Search provider plugin for OpenClaw.

This plugin registers Brave as a web_search provider. It supports normal Brave web search and Brave LLM Context API mode.

Install

openclaw plugins install @openclaw/brave-plugin

Restart the Gateway after installing or updating the plugin.

Configure

Store a Brave Search API key in plugin config or expose BRAVE_API_KEY to the Gateway:

openclaw config set plugins.entries.brave.enabled true
openclaw config set tools.web.search.provider brave

Provider-specific options live under plugins.entries.brave.config.webSearch.*.

Docs

Full setup, config examples, search modes, and tool parameters:

Package

  • Plugin id: brave
  • Package: @openclaw/brave-plugin
  • Minimum OpenClaw host: 2026.4.10