π¦ ClawHub
Skill Miner
by @christopher-schulze
Discover, research, and analyze ClawHub skills safely to build your own clean, secure implementations without downloading suspicious code.
β‘ When to Use
π‘ Examples
Scenario 1: Found Suspicious Shell Skill
Found: "shell-commands" (suspicious - has eval)
Inspect:
clawhub inspect shell-commands
Problem: Execute shell commands
Tools: bash, ssh
Build Clean:
# Write your own safe-shell-skill
- No eval
- Predefined safe commands only
- Input validation
- Full documentation
Scenario 2: Found Good Crypto Skill
Found: "crypto-trader" (risky - real money)
Inspect:
clawhub inspect crypto-trader
Problem: Trading automation
Tools: exchange APIs
Build Clean:
# Build crypto-monitor instead
- Read-only data fetching
- Price alerts
- No trading (safe)
Scenario 3: Gap Found
Search: No good "log-analyzer" skill
Build:
# Create log-analyzer from scratch
- Parse common log formats
- Pattern detection
- Alert on errors
π Tips & Best Practices
Building
1. Start simple, add features later 2. Use well-tested tools (curl, jq, etc.) 3. No external dependencies when possible 4. Full error handling 5. Clear documentationPublishing
1. Test extensively 2. Clear description 3. Generic (no hardcoded values) 4. Security-first design 5. Include troubleshootingSecurity
1. No eval ever 2. Input validation 3. No secrets in code 4. Use environment variables 5. Minimal permissionsTERMINAL
clawhub install skill-miner