ClawSentinel

---

name: ClawSentinel description: Pure local 2026 ClawHub/OpenClaw skill scanner. Detects ClawHavoc malware, MCP backdoors, obfuscated payloads, and supply-chain attacks. 100% read-only analysis. version: 2.3.4 tags: [security, auditor, clawhavoc, malware, mcp, supply-chain, zero-trust]

---

ClawSentinel v2.3

The sharpest skill auditor in the ClawHavoc era. Scans any skill markdown or GitHub repo for malicious patterns before you install it. Never executes code. Trained on public DataClaw dataset.

Security Guarantees

100% local read-only analysis

Only fetches raw.githubusercontent.com when you explicitly audit a public GitHub repo

Zero telemetry in base version

How to use

"audit this skill:" + paste markdown

"audit github https://github.com/user/repo"

Output Format

Always clean JSON.

Pro Tip

Run ClawSentinel on every skill before installing. ClawHub is infested right now.