skill-hub-united@1.0.7
VERIFIED· install onlyPublisher claims: "Install skills from multiple skill hubs with one tool: clawhub.ai (default), skillhub.cn (SkillHub, China-optimized), skills.sh (npx skills, GitHub-based), the official anthropics/skills repo, and your own self-hosted "custom" hub. Routes to the right source based on how the user phrases the request, handles name collisions (rename/overwrite/abort), Anthropic source-available license gating, multi-skill repos, and path-traversal-safe extraction. Use when the user says "install skill X", "add skill X", "download skill X", "get X from clawhub", "get X from skillhub.cn", "use skills.sh to install X", "install the claude/anthropic X skill", or "install X from my hub". Also triggers in Chinese: "安装skill xxx"、"装一下xxx"、"下载skill xxx"、 "从 clawhub 装 xxx"、"从 skillhub.cn 装 xxx"、"用 skills.sh 装 xxx"、 "装 claude 的 xxx"、"从我的 hub 装 xxx"。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-13 and scored it 87/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
(default), skillhub.cn (SkillHub, China-optimized), skills.sh (npxFix: Pin versions and sources; vendor anything fetched at install time.warn(f"{rest_err}; falling back to npx clawhub")Fix: Pin versions and sources; vendor anything fetched at install time.| `skills_sh` | skills.sh / `npx skills` CLI (GitHub-source based) | none |Fix: Pin versions and sources; vendor anything fetched at install time.subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.warn(f"REST download failed ({rest_err}); falling back to npx clawhub")Fix: Pin versions and sources; vendor anything fetched at install time.- clawhub (default) : clawhub.ai public hub (REST, npx fallback)Fix: Pin versions and sources; vendor anything fetched at install time.| `clawhub` (default) | clawhub.ai public hub (REST, with `npx clawhub` fallback) | none |Fix: Pin versions and sources; vendor anything fetched at install time.proc = subprocess.run(cmd, capture_output=True, text=True, timeout=240, cwd=staging)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.proc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.- skills_sh : skills.sh / npx skills CLI (GitHub source-based)Fix: Pin versions and sources; vendor anything fetched at install time.| "skills.sh" / "npx skills" / "open skills" / "skills cli" | `skills_sh` |Fix: Pin versions and sources; vendor anything fetched at install time.- Falls back to `npx clawhub@latest install` if REST failsFix: Pin versions and sources; vendor anything fetched at install time."""Prefer the REST API, fall back to `npx clawhub@latest install` on failure."""Fix: Pin versions and sources; vendor anything fetched at install time.Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.