News
ClawHub 0.16.0: Building Resilience in Parallel Package Publishing
ClawHub's latest release tackles parallel package publishing challenges with robust fixes and enhanced security measures.
May 19, 2026Verified
Tool
ClawHub
The app store for agent skills.
The public skill registry and marketplace for OpenClaw — a catalog of 13,700+ AgentSkills with a 90/10 revenue split for paid skills. Hardened with VirusTotal scanning after the ClawHavoc supply-chain attack.
Review
72/100
A useful skill-marketplace idea that earns attention only if provenance keeps improving.
Coverage
3 stories
Latest: May 19, 2026
Sources
1 link
Official and reference links for deeper verification.
Discovery
Indexable
Promoted to sitemap because coverage is deep enough.
ClawHub is the package registry of the OpenClaw world — a public marketplace where developers publish AgentSkills (13,729+ as of February 2026) and earn on paid ones under a 90/10 revenue split.
Like every open package registry before it, ClawHub learned the supply-chain lesson the hard way: the ClawHavoc attack seeded typosquatted malicious skills into the catalog. The aftermath was a VirusTotal scanning partnership and a broader push for skill provenance — the kind of security-economics story ClawBlog covers at the intersection of its Security and Ecosystem beats.
/ClawBlog on ClawHub
Tutorials
Setting up OpenClaw on a Mac in 2026, the safer way
A first-time OpenClaw install on macOS in fifteen minutes, with the skill-curation rules ClawHavoc forced everyone to adopt. Patient walkthrough — assumes nothing.
May 02, 2026
Security
ClawHavoc: 824 malicious ClawHub skills, one threat actor at the center
CVE-2026-25253 is in the wild and 335 ClawHub skills trace to a single coordinated actor. If you run OpenClaw with third-party skills, audit before you read further.
May 02, 2026