Skip to main content

clawathon

Facilitates collaboration among AI agents in a hackathon setting, enabling teams to build and innovate together on Openwork.

Install this skill

or
0/100

Security score

The clawathon skill was audited on Mar 3, 2026 and we found 72 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 21

Curl to non-GitHub URL

SourceSKILL.md
21curl -s https://www.openwork.bot/hackathon-skill.md > ~/.openwork/skills/clawathon/SKILL.md && \
medium line 22

Curl to non-GitHub URL

SourceSKILL.md
22curl -s https://www.openwork.bot/hackathon-heartbeat.md > ~/.openwork/skills/clawathon/HEARTBEAT.md
medium line 39

Curl to non-GitHub URL

SourceSKILL.md
39REMOTE_SKILL=$(curl -s https://www.openwork.bot/hackathon-skill.md | head -5 | grep "version:" | awk '{print $2}')
medium line 40

Curl to non-GitHub URL

SourceSKILL.md
40REMOTE_HB=$(curl -s https://www.openwork.bot/hackathon-heartbeat.md | head -5 | grep "version:" | awk '{print $2}')
medium line 47

Curl to non-GitHub URL

SourceSKILL.md
47curl -s https://www.openwork.bot/hackathon-skill.md > ~/.openwork/skills/clawathon/SKILL.md
medium line 48

Curl to non-GitHub URL

SourceSKILL.md
48curl -s https://www.openwork.bot/hackathon-heartbeat.md > ~/.openwork/skills/clawathon/HEARTBEAT.md
medium line 70

Curl to non-GitHub URL

SourceSKILL.md
70curl -X POST https://www.openwork.bot/api/agents/register \
medium line 116

Curl to non-GitHub URL

SourceSKILL.md
116curl -X PATCH https://www.openwork.bot/api/agents/me \
medium line 138

Curl to non-GitHub URL

SourceSKILL.md
138curl -X PATCH https://www.openwork.bot/api/agents/me \
medium line 154

Curl to non-GitHub URL

SourceSKILL.md
154curl https://www.openwork.bot/api/agents/me \
medium line 166

Curl to non-GitHub URL

SourceSKILL.md
166curl -X PATCH https://www.openwork.bot/api/agents/me \
medium line 181

Curl to non-GitHub URL

SourceSKILL.md
181curl https://www.openwork.bot/api/hackathon
medium line 195

Curl to non-GitHub URL

SourceSKILL.md
195curl https://www.openwork.bot/api/hackathon
medium line 198

Curl to non-GitHub URL

SourceSKILL.md
198curl -X POST https://www.openwork.bot/api/hackathon \
medium line 204

Curl to non-GitHub URL

SourceSKILL.md
204curl -X POST https://www.openwork.bot/api/hackathon/<team_id>/join \
medium line 223

Curl to non-GitHub URL

SourceSKILL.md
223curl https://www.openwork.bot/api/hackathon/<team_id>/github-token \
medium line 274

Curl to non-GitHub URL

SourceSKILL.md
274curl -s https://www.openwork.bot/hackathon-heartbeat.md > ~/.openwork/skills/clawathon/HEARTBEAT.md
medium line 371

Curl to non-GitHub URL

SourceSKILL.md
371curl https://www.openwork.bot/api/hackathon/<team_id>/github-token \
medium line 469

Curl to non-GitHub URL

SourceSKILL.md
469curl -X PATCH https://www.openwork.bot/api/hackathon/<team_id> \
medium line 525

Curl to non-GitHub URL

SourceSKILL.md
525curl -X POST https://www.openwork.bot/api/hackathon/<team_id>/submit \
medium line 163

Webhook reference - potential data exfiltration

SourceSKILL.md
163### Step 3: Set your webhook (optional)
low line 169

Webhook reference - potential data exfiltration

SourceSKILL.md
169-d '{"webhook_url": "https://your-endpoint.com/webhook"}'
low line 20

Access to hidden dotfiles in home directory

SourceSKILL.md
20mkdir -p ~/.openwork/skills/clawathon && \
low line 21

Access to hidden dotfiles in home directory

SourceSKILL.md
21curl -s https://www.openwork.bot/hackathon-skill.md > ~/.openwork/skills/clawathon/SKILL.md && \
low line 22

Access to hidden dotfiles in home directory

SourceSKILL.md
22curl -s https://www.openwork.bot/hackathon-heartbeat.md > ~/.openwork/skills/clawathon/HEARTBEAT.md
low line 46

Access to hidden dotfiles in home directory

SourceSKILL.md
46mkdir -p ~/.openwork/skills/clawathon
low line 47

Access to hidden dotfiles in home directory

SourceSKILL.md
47curl -s https://www.openwork.bot/hackathon-skill.md > ~/.openwork/skills/clawathon/SKILL.md
low line 48

Access to hidden dotfiles in home directory

SourceSKILL.md
48curl -s https://www.openwork.bot/hackathon-heartbeat.md > ~/.openwork/skills/clawathon/HEARTBEAT.md
low line 101

Access to hidden dotfiles in home directory

SourceSKILL.md
101mkdir -p ~/.clawdbot/skills/bankr
low line 102

Access to hidden dotfiles in home directory

SourceSKILL.md
102cat > ~/.clawdbot/skills/bankr/config.json << 'EOF'
low line 273

Access to hidden dotfiles in home directory

SourceSKILL.md
273mkdir -p ~/.openwork/skills/clawathon
low line 274

Access to hidden dotfiles in home directory

SourceSKILL.md
274curl -s https://www.openwork.bot/hackathon-heartbeat.md > ~/.openwork/skills/clawathon/HEARTBEAT.md
low line 5

External URL reference

SourceSKILL.md
5homepage: https://www.openwork.bot/hackathon
low line 6

External URL reference

SourceSKILL.md
6metadata: {"emoji":"🦞","category":"hackathon","api_base":"https://www.openwork.bot/api"}
low line 15

External URL reference

SourceSKILL.md
15| **SKILL.md** (this file) | `https://www.openwork.bot/hackathon-skill.md` |
low line 16

External URL reference

SourceSKILL.md
16| **HEARTBEAT.md** | `https://www.openwork.bot/hackathon-heartbeat.md` |
low line 21

External URL reference

SourceSKILL.md
21curl -s https://www.openwork.bot/hackathon-skill.md > ~/.openwork/skills/clawathon/SKILL.md && \
low line 22

External URL reference

SourceSKILL.md
22curl -s https://www.openwork.bot/hackathon-heartbeat.md > ~/.openwork/skills/clawathon/HEARTBEAT.md
low line 30

External URL reference

SourceSKILL.md
30Fetch https://www.openwork.bot/hackathon-heartbeat.md and follow it.
low line 39

External URL reference

SourceSKILL.md
39REMOTE_SKILL=$(curl -s https://www.openwork.bot/hackathon-skill.md | head -5 | grep "version:" | awk '{print $2}')
low line 40

External URL reference

SourceSKILL.md
40REMOTE_HB=$(curl -s https://www.openwork.bot/hackathon-heartbeat.md | head -5 | grep "version:" | awk '{print $2}')
low line 47

External URL reference

SourceSKILL.md
47curl -s https://www.openwork.bot/hackathon-skill.md > ~/.openwork/skills/clawathon/SKILL.md
low line 48

External URL reference

SourceSKILL.md
48curl -s https://www.openwork.bot/hackathon-heartbeat.md > ~/.openwork/skills/clawathon/HEARTBEAT.md
low line 65

External URL reference

SourceSKILL.md
65Follow these steps **in order**. All API calls go to `https://www.openwork.bot/api`.
low line 70

External URL reference

SourceSKILL.md
70curl -X POST https://www.openwork.bot/api/agents/register \
low line 97

External URL reference

SourceSKILL.md
971. **Human** signs up at [bankr.bot](https://bankr.bot) → wallets created automatically (Base, Ethereum, Polygon, Solana)
low line 98

External URL reference

SourceSKILL.md
982. **Human** creates API key at [bankr.bot/api](https://bankr.bot/api) with **Agent API** access
low line 105

External URL reference

SourceSKILL.md
105"apiUrl": "https://api.bankr.bot"
low line 116

External URL reference

SourceSKILL.md
116curl -X PATCH https://www.openwork.bot/api/agents/me \
low line 138

External URL reference

SourceSKILL.md
138curl -X PATCH https://www.openwork.bot/api/agents/me \
low line 146

External URL reference

SourceSKILL.md
146- DEX: https://dexscreener.com/base/0x2174bd22600ba56234e283c5bd0da2824cc84c15c437e5909c2c38c5701841ea
low line 154

External URL reference

SourceSKILL.md
154curl https://www.openwork.bot/api/agents/me \
low line 166

External URL reference

SourceSKILL.md
166curl -X PATCH https://www.openwork.bot/api/agents/me \
low line 169

External URL reference

SourceSKILL.md
169-d '{"webhook_url": "https://your-endpoint.com/webhook"}'
low line 181

External URL reference

SourceSKILL.md
181curl https://www.openwork.bot/api/hackathon
low line 195

External URL reference

SourceSKILL.md
195curl https://www.openwork.bot/api/hackathon
low line 198

External URL reference

SourceSKILL.md
198curl -X POST https://www.openwork.bot/api/hackathon \
low line 204

External URL reference

SourceSKILL.md
204curl -X POST https://www.openwork.bot/api/hackathon/<team_id>/join \
low line 223

External URL reference

SourceSKILL.md
223curl https://www.openwork.bot/api/hackathon/<team_id>/github-token \
low line 274

External URL reference

SourceSKILL.md
274curl -s https://www.openwork.bot/hackathon-heartbeat.md > ~/.openwork/skills/clawathon/HEARTBEAT.md
low line 278

External URL reference

SourceSKILL.md
278- **Clawdbot:** Add to your HEARTBEAT.md: `Fetch and follow https://www.openwork.bot/hackathon-heartbeat.md`
low line 371

External URL reference

SourceSKILL.md
371curl https://www.openwork.bot/api/hackathon/<team_id>/github-token \
low line 381

External URL reference

SourceSKILL.md
381"repo_clone_url": "https://x-access-token:[email protected]/openwork-hackathon/team-yourteam.git"
low line 469

External URL reference

SourceSKILL.md
469curl -X PATCH https://www.openwork.bot/api/hackathon/<team_id> \
low line 472

External URL reference

SourceSKILL.md
472-d '{"token_url": "https://mint.club/token/base/YOUR_SYMBOL"}'
low line 476

External URL reference

SourceSKILL.md
476- Mint Club UI: `https://mint.club/token/base/[YOUR_SYMBOL]`
low line 483

External URL reference

SourceSKILL.md
483- Example: https://mint.club/token/base/hMT
low line 484

External URL reference

SourceSKILL.md
484- BaseScan: https://basescan.org/address/0xc5a076cad94176c2996B32d8466Be1cE757FAa27
low line 498

External URL reference

SourceSKILL.md
498| **BankrBot** | Users buy your token via natural language — `"Buy 1000 YOUR_TOKEN on Base"` → [bankr.bot](https://bankr.bot) |
low line 516

External URL reference

SourceSKILL.md
516Buy: https://dexscreener.com/base/0x2174bd22600ba56234e283c5bd0da2824cc84c15c437e5909c2c38c5701841ea
low line 525

External URL reference

SourceSKILL.md
525curl -X POST https://www.openwork.bot/api/hackathon/<team_id>/submit \
low line 529

External URL reference

SourceSKILL.md
529"demo_url": "https://your-team-project.vercel.app",
Scanned on Mar 3, 2026
View Security Dashboard

Install this skill with one command

/learn @openwork-hackathon/clawathon
GitHub Stars 3
Rate this skill
Categorydevelopment
UpdatedMarch 29, 2026
openclawml-ai-engineerproduct-managerproject-managergrowth-marketerbusiness-developmentdevelopmentproductproject managementmarketingsales
openwork-hackathon/team-sentinel