New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details →
Socket
Book a DemoSign in
Socket

clawhub

Package Overview
Dependencies
Maintainers
1
Versions
8
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

clawhub

ClawHub CLI \u2014 install, update, search, and publish skills plus OpenClaw packages.

latest
npmnpm
Version
0.9.0
Version published
Weekly downloads
227K
-22.77%
Maintainers
1
Weekly downloads
 
Created
Source

clawhub

ClawHub CLI — install, update, search, and publish agent skills plus OpenClaw packages.

Install

# From this repo (shortcut script at repo root)
bun clawhub --help

# Once published to npm
# npm i -g clawhub

Auth (publish)

clawhub login
# or
clawhub auth login

# Headless / token paste
# or (token paste / headless)
clawhub login --token clh_...

Notes:

  • Browser login opens https://clawhub.ai/cli/auth and completes via a loopback callback.
  • Token stored in ~/Library/Application Support/clawhub/config.json on macOS (override via CLAWHUB_CONFIG_PATH, legacy CLAWDHUB_CONFIG_PATH).

Examples

clawhub search "postgres backups"
clawhub install my-skill-pack
clawhub update --all
clawhub update --all --no-input --force
clawhub publish ./my-skill-pack --slug my-skill-pack --name "My Skill Pack" --version 1.2.0 --changelog "Fixes + docs"
clawhub package explore --family skill
clawhub package explore --family code-plugin
clawhub package inspect @openclaw/example-plugin
clawhub package publish ./example-plugin --source-repo openclaw/example-plugin --source-commit abc123

Sync (upload local skills)

# Start anywhere; scans workdir first, then legacy Clawdis/Clawd/OpenClaw/Moltbot locations.
clawhub sync

# Explicit roots + non-interactive dry-run
clawhub sync --root ../clawdis/skills --all --dry-run

Defaults

  • Site: https://clawhub.ai (override via --site or CLAWHUB_SITE, legacy CLAWDHUB_SITE)
  • Registry: discovered from /.well-known/clawhub.json on the site (legacy /.well-known/clawdhub.json; override via --registry or CLAWHUB_REGISTRY)
  • Workdir: current directory (falls back to Clawdbot workspace if configured; override via --workdir or CLAWHUB_WORKDIR)
  • Install dir: ./skills under workdir (override via --dir)

FAQs

Package last updated on 23 Mar 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts