ClawHub
Named by 10 kept items in this workspace.
5 items name it under affected products and 5 under tools.
Search every workspace for ClawHub. It matches the name as written, so it can find other things that share it.
The items that name it 10
skill publishing took only a Markdown file and a week-old GitHub account
Agent skill registry; publish bar was only a SKILL.md file and a one-week-old GitHub account; target of ClawHavoc campaign
Marketplace/registry for OpenClaw skills, referenced as the source for installing the clawseccheck skill and as the site whose listing scan produced a worked false-positive example (v4.0.1, 2026-09-08)
Platform for AI/agent skills; used by threat actors to publish malicious skills, over 700 found in the database by end of March 2026
OpenClaw's skill registry, an AI skills registry launched in January that was quickly exploited by threat actors publishing malicious skills.
OpenClaw's public skill marketplace, whose two-part scanning solution (VirusTotal integration + custom guard-model harness) was bypassed
Dedicated skill registry associated with OpenClaw/Clawdbot/Moltbot/Molty platform.
Real ClawHub skills and registry mechanisms used as the experimental testbed for studying semantic supply-chain attacks on Agent Skills
OpenClaw skill registry; implemented automated scanning and partnered with VirusTotal after poisoning incident.
Platform on which 1,184 malicious skills were confirmed by Antiy CERT
All technologies in this workspace.