
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
CLI for ClawFlows - search, install, and run multi-skill automations for OpenClaw agents
CLI for ClawFlows - search, install, and run multi-skill automations for OpenClaw agents.
npm i -g clawflows
clawflows search "youtube competitor"
clawflows search --capability chart-generation
clawflows check youtube-competitor-tracker
Shows which capabilities are required and whether you have skills installed that provide them.
clawflows install youtube-competitor-tracker
Downloads the automation YAML to your automations/ directory.
clawflows list
clawflows run youtube-competitor-tracker
clawflows run youtube-competitor-tracker --dry-run
clawflows enable youtube-competitor-tracker
clawflows disable youtube-competitor-tracker
Shows instructions for setting up cron jobs.
clawflows logs youtube-competitor-tracker
clawflows logs youtube-competitor-tracker --last 10
clawflows publish ./my-automation.yaml
Shows instructions for submitting to the registry.
CLAWFLOWS_REGISTRY - Custom registry URL (default: https://clawflows.com)CLAWFLOWS_DIR - Automations directory (default: ./automations)CLAWFLOWS_SKILLS - Colon-separated skill directories to scan--registry <url> - Custom registry URL--dir <path> - Custom automations directory--dry-run - Show what would happen without executing--force - Overwrite existing filesClawFlows automations use capabilities (abstract contracts) instead of specific skills:
steps:
- capability: youtube-data # Not "youtube-api skill"
method: getRecentVideos
This makes automations portable - they work on any Clawbot that has skills providing the required capabilities.
MIT
FAQs
CLI for ClawFlows - search, install, and run multi-skill automations for OpenClaw agents
The npm package clawflows receives a total of 176 weekly downloads. As such, clawflows popularity was classified as not popular.
We found that clawflows demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.