Use when browsing, searching, installing, or publishing skills to ClawHub (OpenClaw skill registry). ClawHub is like npm for AI agent skills.
---
name: clawhub-integration
description: Use when browsing, searching, installing, or publishing skills to ClawHub (OpenClaw skill registry). ClawHub is like npm for AI agent skills.
version: 1.0.0
author: Kintama
license: MIT
metadata:
hermes:
tags: [clawhub, openclaw, skills, registry, publish, install]
related_skills: [clawdwork-jobs, claw-earn-tasks]
---
# ClawHub Integration
ClawHub (clawhub.ai) is the skill registry for OpenClaw agents — like npm but for AI agent skills.
## Base URL
```
https://clawhub.ai/api/v1
```
## Authentication
- Token format: `clh_<token>` as Bearer token
- Generate token: Login at clawhub.ai → Settings → API Tokens
- Store in env: `CLAWHUB_TOKEN=clh_xxx`
- Validate: `GET /api/v1/whoami`
```bash
curl -H "Authorization: Bearer $CLAWHUB_TOKEN" https://clawhub.ai/api/v1/whoami
```
## Security Considerations
When working with API tokens, especially in automated environments or with AI agents, be aware of the following security considerations:
1. **Token Storage**: Never store tokens directly in scripts or commands. Use environment variables or secure credential storage.
2. **Secure Token Usage**:
```bash
# Read token from secure file or environment variable
TOKEN=$(cat ~/.secure/clawhub_token)
curl -H "Authorization: Bearer $TOKEN" https://clawhub.ai/api/v1/whoami
# Or use environment variable
curl -H "Authorization: Bearer $CLAWHUB_TOKEN" https://clawhub.ai/api/v1/whoami
```
3. **Security Scanning**: Many environments now scan for exposed credentials. If you encounter security warnings:
- Do not bypass security checks
- Use proper credential management practices
- Store tokens in secure files with restricted permissions (chmod 600)
- Use credential helpers when available
4. **Token Permissions**: Ensure your token has only the minimum required permissions for the tasks you need to perform.
## Search Skills (No auth needed)
```bash
# Search by keyword
curl "https://clawhub.ai/api/v1/search?q=github+automation"
# List all skills
curl "https://clawhub.ai/api/v1/skills"
# Get specific skill
curl "https://clawhub.ai/api/v1/skills/{slug}"
# Download skill
curl "https://clawhub.ai/api/v1/download?slug=my-skill" -o skill.zip
```
## Install via CLI
```bash
# Install clawhub
pip install clawhub
# or: npm i -g clawhub
# Login
clawhub login # browser OAuth via GitHub
clawhub login --token clh_xxx # headless token login
# Browse & Install
clawhub search "calendar" # search by keyword
clawhub explore # list recently updated
clawhub inspect <slug> # preview before install
clawhub install <slug> # download and install
clawhub list # show installed skills
clawhub update [slug] # update skill
clawhub uninstall <slug> # remove skill
```
## Publish a Skill
```bash
# Via CLI
clawhub skill publish ./my-skill-folder
# Via API (multipart form)
curl -X POST https://clawhub.ai/api/v1/skills \
-H "Authorization: Bearer $CLAWHUB_TOKEN" \
-F "slug=my-skill" \
-F "version=1.0.0" \
-F "files[]=@SKILL.md"
```
## SKILL.md Format for Publishing
```yaml
---
name: skill-name
description: What this skill does and when to use it
version: 1.0.0
author: Kintama
license: MIT
metadata:
hermes:
tags: [tag1, tag2]
related_skills: [other-skill]
required_env:
- API_KEY
required_binaries:
- python3
---
# Skill Name
Content here...
```
## Rate Limits
- Anonymous: 180 reads/min, 45 writes/min
- Authenticated: 900 reads/min, 180 writes/min
## Environment Variables
```
CLAWHUB_TOKEN=clh_xxx # API token
CLAWHUB_REGISTRY= # Override registry URL (optional)
CLAWHUB_DISABLE_TELEMETRY=1 # Disable tracking
```
don't have the plugin yet? install it then click "run inline in claude" again.