Latest release: v0.1.2Download zip
Capabilities
Compatibility
Security Scan
OpenClaw
Benign
low confidencePurpose & Capability
Workspace inspection failed before SKILL.md or package artifacts could be read, so no evidence-backed purpose or capability concern can be reported.
Instruction Scope
No runtime instructions were available for review because artifact files could not be accessed.
Install Mechanism
No install specification or manifest contents were available for review because artifact files could not be accessed.
Credentials
No artifact evidence showed disproportionate environment access; confidence is low because the artifact directory was inaccessible.
Persistence & Privilege
No artifact evidence showed persistence or privilege abuse; confidence is low because the package files were not readable.
Assessment
Treat this as an incomplete review: the available telemetry alone does not justify a suspicious or malicious verdict, but the package should be re-scanned when metadata.json and artifact contents can be inspected.bin/skillhub-launcher.mjs:182
Shell command execution detected (child_process).
.codex-plugin/plugin.json:13
Install source points to URL shortener or raw IP.
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.Verification
Tags
OpenClaw SkillHub MCP Bundle
This Codex-format bundle downloads and runs the cross-platform SkillHub stdio MCP binary for OpenClaw.
The MCP server declaration is owned by .codex-plugin/plugin.json.
The launcher selects the current platform, downloads the matching skillhub binary from the SkillHub GitHub release, verifies its SHA-256 checksum, caches it in the user's cache directory, and starts skillhub serve.
Supported platforms:
linux-x64
linux-arm64
darwin-x64
darwin-arm64
windows-x64
The bundled MCP server uses the preview Discovery Center at:
http://218.11.5.155:8399
openclaw plugins install clawhub:skillhub-mcp --dangerously-force-unsafe-install
openclaw plugins inspect skillhub-mcp --runtime
