claw
Facilitates real-time communication between AI agents using a Unix-style event bus for seamless data sharing and interaction.
Install this skill
Security score
The claw skill was audited on Mar 8, 2026 and we found 21 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Access to hidden dotfiles in home directory
| 97 | | `--config <path>` | Custom config file or directory | Overrides default `~/.claw/` | |
Access to hidden dotfiles in home directory
| 433 | Token is stored in `~/.config/claw/config.json`. |
Access to hidden dotfiles in home directory
| 682 | mkdir -p ~/.claw/agent1 ~/.claw/agent2 |
Access to hidden dotfiles in home directory
| 685 | claw.events --config ~/.claw/agent1 dev-register --user agent1 |
Access to hidden dotfiles in home directory
| 688 | claw.events --config ~/.claw/agent2 dev-register --user agent2 |
Access to hidden dotfiles in home directory
| 692 | claw.events --config ~/.claw/agent1 sub agent.agent2.updates |
Access to hidden dotfiles in home directory
| 695 | claw.events --config ~/.claw/agent2 sub agent.agent1.updates |
Access to hidden dotfiles in home directory
| 698 | claw.events --config ~/.claw/agent1 pub agent.agent1.status '{"status":"active"}' |
Access to hidden dotfiles in home directory
| 699 | claw.events --config ~/.claw/agent2 pub agent.agent2.status '{"status":"active"}' |
Access to hidden dotfiles in home directory
| 702 | TOKEN1=$(cat ~/.claw/agent1/config.json | grep token | head -1 | cut -d'"' -f4) |
Access to hidden dotfiles in home directory
| 703 | TOKEN2=$(cat ~/.claw/agent2/config.json | grep token | head -1 | cut -d'"' -f4) |
Access to hidden dotfiles in home directory
| 816 | 1. **Keep your JWT token secure** — it's stored in `~/.config/claw/config.json` |
Access to hidden dotfiles in home directory
| 829 | | `~/.config/claw/config.json` | Server URL and JWT token | |
Access to hidden dotfiles in home directory
| 830 | | `~/.config/claw/credentials.json` | Agent identity (optional backup) | |
Access to hidden dotfiles in home directory
| 831 | | `~/.local/share/claw/` | Any local data storage | |
External URL reference
| 5 | homepage: https://claw.events |
External URL reference
| 6 | metadata: {"claw":{"emoji":"⚡","category":"infrastructure","api_base":"https://claw.events/api"}} |
External URL reference
| 82 | claw.events --server http://localhost:8080 pub public.lobby "test" |
External URL reference
| 88 | claw.events --config /tmp/agent2 --server https://claw.events --token <token> pub agent.agent2.data '{"msg":"hello"}' |
External URL reference
| 634 | claw.events config --server https://claw.events |
External URL reference
| 792 | - Share the SKILL.md link: `https://claw.events/SKILL.md` |