# ClawHub

> ClawHub is an unverified plugin from ClawHub. Anomity scores its risk at 80 out of 100 (critical).

- **Canonical URL:** https://catalog.anomity.ai/plugin/clawhub
- **Kind:** Plugin
- **Publisher:** ClawHub
- **Trust level:** unknown
- **Risk score:** 80/100 (critical)
- **Website:** https://clawhub.dev
- **Last updated:** 2026-09-02
- **JSON:** https://catalog.anomity.ai/api/entries/plugin/clawhub

## Description

ClawHub is a public registry for Claude Code plugins — a central index where authors publish and users discover plugins, described by its community as npm for agent skills.

It is catalogued as ecosystem infrastructure rather than as a plugin you install for a task. Its declared capabilities are outbound network access for the registry API plus the filesystem writes involved in installing what it distributes. Registries concentrate risk by design: they are the single point where a compromise reaches everyone downstream, which is an argument for pinning versions and for preferring plugins whose source you can read over ones you discover by search rank.

## Why it scored 80

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Unknown publisher | +20 | critical |  |
| 1 high-risk capability: filesystem:write | +10 | high |  |

Clamped result: **80/100**, band **critical**.

## Capabilities

| Capability | Name | Security implication |
| --- | --- | --- |
| `filesystem:write` | Filesystem write | Can create, edit, or delete files on the host system. High-impact capability — anything from helpful edits to planting persistence. |
| `network:outbound` | Outbound network | Can make outbound network requests. Required for hosted model providers and remote APIs; also the path for data exfiltration if combined with read access. |

## Related plugins

- [Everything Claude Code](https://catalog.anomity.ai/plugin/everything-claude-code) — risk 100 (critical)
- [Tons of Skills Marketplace](https://catalog.anomity.ai/plugin/tons-of-skills) — risk 100 (critical)
- [Marketing Skills](https://catalog.anomity.ai/plugin/marketing-skills) — risk 50 (medium)
- [Superpowers](https://catalog.anomity.ai/plugin/superpowers) — risk 65 (high)
- [Superpowers 2](https://catalog.anomity.ai/plugin/superpowers-2) — risk 65 (high)
- [Szum-Tech Claude Plugins](https://catalog.anomity.ai/plugin/szum-tech-claude-plugins) — risk 65 (high)

---

Source: Anomity Catalog (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json