{"id":50832286,"url":"https://github.com/zack-dev-cm/trusted-clawhub-install-gate","last_synced_at":"2026-06-14T00:07:58.509Z","repository":{"id":356504503,"uuid":"1232823211","full_name":"zack-dev-cm/trusted-clawhub-install-gate","owner":"zack-dev-cm","description":"Local-first install gate for ClawHub and OpenClaw skills.","archived":false,"fork":false,"pushed_at":"2026-05-08T10:04:00.000Z","size":18,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-05-08T12:09:37.127Z","etag":null,"topics":["clawhub","openclaw","security"],"latest_commit_sha":null,"homepage":"https://github.com/zack-dev-cm/trusted-clawhub-install-gate","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/zack-dev-cm.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-05-08T10:02:26.000Z","updated_at":"2026-05-08T10:04:16.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/zack-dev-cm/trusted-clawhub-install-gate","commit_stats":null,"previous_names":["zack-dev-cm/trusted-clawhub-install-gate"],"tags_count":null,"template":false,"template_full_name":null,"purl":"pkg:github/zack-dev-cm/trusted-clawhub-install-gate","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zack-dev-cm%2Ftrusted-clawhub-install-gate","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zack-dev-cm%2Ftrusted-clawhub-install-gate/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zack-dev-cm%2Ftrusted-clawhub-install-gate/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zack-dev-cm%2Ftrusted-clawhub-install-gate/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/zack-dev-cm","download_url":"https://codeload.github.com/zack-dev-cm/trusted-clawhub-install-gate/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zack-dev-cm%2Ftrusted-clawhub-install-gate/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34304665,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-13T02:00:06.617Z","response_time":62,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["clawhub","openclaw","security"],"created_at":"2026-06-14T00:07:57.880Z","updated_at":"2026-06-14T00:07:58.501Z","avatar_url":"https://github.com/zack-dev-cm.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Trusted ClawHub Install Gate\n\n`Trusted ClawHub Install Gate` is a local-first install wrapper for OpenClaw and ClawHub skills.\n\nIt does five things for `v0.2`:\n\n1. Inspect a local unpacked skill directory.\n2. Classify the artifact as `PASS`, `REVIEW`, or `BLOCK`.\n3. Refuse installation by default unless the artifact is `PASS`.\n4. Write a receipt for what was inspected and installed.\n5. Summarize install and approved `REVIEW` usage from local receipts.\n\nThis release is intentionally narrow. It only supports local skill directories. It does not pretend to resolve arbitrary ClawHub slugs, guarantee safety, or verify runtime behavior inside the host application yet.\n\n## Why this repo exists\n\nThe actual user pain is not \"more discovery\". It is:\n\n- What exactly am I about to install?\n- Does it contain obvious secret theft, destructive behavior, or opaque payloads?\n- If I override the warning, can I at least keep a receipt of what I approved?\n\n## Install\n\n```bash\npip install -e .\n```\n\n## Commands\n\n```bash\nclawhub-install-gate inspect /path/to/skill\nclawhub-install-gate inspect /path/to/skill --json\n\nclawhub-install-gate install /path/to/skill --dest ./skills --allow-review\n\nclawhub-install-gate verify ~/.openclaw/workspace/skills/my-skill\n\nclawhub-install-gate usage\nclawhub-install-gate usage --json\n```\n\n## Install destination\n\n`install` requires an explicit `--dest` path in `v0.1`.\n\nUse the real OpenClaw workspace skill directory, for example `\u003cworkspace\u003e/skills`. The tool does not infer a workspace root yet because silently installing into the current shell directory is worse than failing closed.\n\n## Verdict semantics\n\n- `PASS`: no blocking findings and no review findings.\n- `REVIEW`: ambiguous or risky patterns were found; installation is denied unless the user explicitly passes `--allow-review`.\n- `BLOCK`: clearly unsafe or malformed artifact; installation is denied.\n\n## Receipt location\n\nReceipts are stored under:\n\n```text\n~/.local/share/clawhub-install-gate/receipts\n```\n\nOverride the base directory with `CLAW_INSTALL_GATE_HOME`.\n\n## Verify semantics\n\n`verify` is receipt-aware. It succeeds only when the installed path has a matching receipt, the current installed content hash matches the recorded installed hash, and the current verdict matches the verdict that was approved during install.\n\nAn approved `REVIEW` install verifies successfully only if it was installed with `--allow-review` and the installed files have not drifted since the receipt was written.\n\n## Usage tracking\n\n`usage` summarizes the local receipt store so you can see which skills were installed, which verdicts were accepted, and how many `REVIEW` overrides exist on the machine.\n\nThe command reads local receipt JSON only. It does not call ClawHub, GitHub, or any external network service.\n\n## Auto-review alignment\n\nThis project follows the Codex Auto-review model from the OpenAI developer documentation: review decisions are boundary checks, not permission grants.\n\nThe scanner blocks the same high-level risk classes that Auto-review is designed to stop:\n\n- sending private data, secrets, or credentials to untrusted destinations\n- probing for credentials, tokens, cookies, or session material\n- broad or persistent security weakening\n- destructive actions with significant risk of irreversible damage\n\nIf a skill asks to route around a denial, weaken sandbox or approval controls, or retry a blocked action indirectly, the gate reports `BLOCK`.\n\n## Development\n\n```bash\npython3.10 -m pytest -q\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fzack-dev-cm%2Ftrusted-clawhub-install-gate","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fzack-dev-cm%2Ftrusted-clawhub-install-gate","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fzack-dev-cm%2Ftrusted-clawhub-install-gate/lists"}