Claude Codepasses structure
Checker 0.1.0 · agent-skills-2026-08-13+claude-code-docs-2026-08-13 · 9/20/2026.claude/skills/skill-installRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
Real Skill packageSource verifiedClawHub registry
skill-install
Install Claude skills from GitHub repositories with automated security scanning. Triggers when users want to install skills from a GitHub URL, need to browse available skills in a repository, or want to safely add new skills to their Claude environment.
Identity and source
Publisher attributioneohmigregistry owner unverified by skillvetai
Functional categoryAgent Engineering, Security & Governanceautomatically inferred · 63% rule confidence
Package forminstruction bundle3 recorded files
Canonical sourceClawHub registryclawhub:eohmig:skill-install
Platform declarations
These states come from the source or distribution context. None of the entries below are SkillVetAI compatibility test results.
OpenClawnative officialProvenance: registry distribution
Independent structural checks
These checks parse the fixed package against dated platform rules. They do not execute the Skill or verify task behavior.
OpenAI Codexpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+codex-docs-2026-08-13 · 9/20/2026.agents/skills/skill-installRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
OpenClawpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+openclaw-docs-2026-08-13 · 9/20/2026skills/skill-installRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
Installation and inspection
This command is recorded from the source ecosystem and resolves the registry's latest release. The fixed release shown on this page should be inspected before adoption.
clawhub install @eohmig/skill-installclawhub inspect @eohmig/skill-install --version 1.0.0Security evidence
SkillVetAI static result: high signalhighDynamic code or shell execution is presentreferences/security_scan_prompt.md:21 · confidence 78% highEncoded content is decoded and executedreferences/security_scan_prompt.md:26 · confidence 90% Open human review queue →
This automated, non-executing scan is bound to this release hash. It is not a safety certification and may contain false positives or false negatives.
- Status
- completed
- Coverage
- full text content
- Files
- 3 / 3 inspected as text
- Checked
- 9/20/2026, 4:53:41 AM
- Scanner
- 0.1.3
- Policy
- 1.0.3
2 automated findings
eval(base642 High/Critical review queue entries
STATIC_DYNAMIC_CODE_EXECUTIONpending
STATIC_OBFUSCATED_EXECUTIONpending
3 inferred permission indicators
- shell execution — automatically inferred
- network access — automatically inferred
- filesystem write — automatically inferred
4 dependency and API indicators
- api: api.github.com
- api: clawhub.ai
- api: github.com
- api: raw.githubusercontent.com
External clawhub result: suspicious
This is registry-supplied evidence for the recorded release, not an independent SkillVetAI scan. Check the canonical source for the full report, scanner versions, scope, and current moderation state.
- Evidence checked
- 9/19/2026, 8:36:46 PM
- Release binding
- Matches this record
- skillspector: suspicious
- llm: suspicious
Recorded files
The catalog stores hashes and an inventory summary for change detection. It does not republish the package contents.
Package content hash
sha256:7da8744eee28759f79d42c3b6892c841a27af2760739e9b84b221a901985308cShow up to 3 recorded paths
references/security_scan_prompt.mdskill-card.mdSKILL.md
Source changelog
skill-install 1.0.0 – Initial release - Install Claude skills from GitHub repositories, including browsing and multi-select support. - Automatically performs detailed security scanning of each skill before installation. - Blocks installation of skills with critical security risks; prompts user if warnings are detected. - Provides clear install summaries and explains skipped skills with reasons.