{
  "entry": {
    "kind": "plugin",
    "slug": "clawhub",
    "name": "ClawHub",
    "vendor": "ClawHub",
    "description": "ClawHub is a public registry for Claude Code plugins — a central index where authors publish and users discover plugins, described by its community as npm for agent skills.\n\nIt is catalogued as ecosystem infrastructure rather than as a plugin you install for a task. Its declared capabilities are outbound network access for the registry API plus the filesystem writes involved in installing what it distributes. Registries concentrate risk by design: they are the single point where a compromise reaches everyone downstream, which is an argument for pinning versions and for preferring plugins whose source you can read over ones you discover by search rank.",
    "website": "https://clawhub.dev",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "unknown",
    "capabilities": [
      "filesystem:write",
      "network:outbound"
    ],
    "packaging": {
      "manager": "claude-plugin",
      "packageName": "clawhub"
    },
    "configFiles": null,
    "category": null,
    "updatedAt": "2026-09-02",
    "risk": {
      "score": 80,
      "band": "critical",
      "signals": [
        {
          "id": "trust-unknown",
          "kind": "trust",
          "label": "Unknown publisher",
          "contribution": 20
        },
        {
          "id": "high-risk-capabilities",
          "kind": "capability",
          "label": "1 high-risk capability: filesystem:write",
          "contribution": 10
        }
      ],
      "dangerousCombos": []
    },
    "dangerousCombos": []
  }
}