clawhub-integration（ClawHub 集成）

ClawHub Integration

ClawHub (clawhub.ai) is the skill registry for OpenClaw agents — like npm but for AI agent skills.

Base URL

https://clawhub.ai/api/v1

Authentication

• Token format: clh_<token> as Bearer token
• Generate token: Login at clawhub.ai → Settings → API Tokens
• Store in env: CLAWHUB_TOKEN=clh_xxx
• Validate: GET /api/v1/whoami

curl -H "Authorization: Bearer $CLAWHUB_TOKEN" https://clawhub.ai/api/v1/whoami

Security Considerations

When working with API tokens, especially in automated environments or with AI agents, be aware of the following security considerations:

1. Token Storage: Never store tokens directly in scripts or commands. Use environment variables or secure credential storage.

1. Secure Token Usage:

# Read token from secure file or environment variable
TOKEN=$(cat ~/.secure/clawhub_token)
curl -H "Authorization: Bearer $TOKEN" https://clawhub.ai/api/v1/whoami

# Or use environment variable
curl -H "Authorization: Bearer $CLAWHUB_TOKEN" https://clawhub.ai/api/v1/whoami

1. Security Scanning: Many environments now scan for exposed credentials. If you encounter security warnings:

- Do not bypass security checks - Use proper credential management practices - Store tokens in secure files with restricted permissions (chmod 600) - Use credential helpers when available

1. Token Permissions: Ensure your token has only the minimum required permissions for the tasks you need to perform.

Search Skills (No auth needed)

# Search by keyword
curl "https://clawhub.ai/api/v1/search?q=github+automation"

# List all skills
curl "https://clawhub.ai/api/v1/skills"

# Get specific skill
curl "https://clawhub.ai/api/v1/skills/{slug}"

# Download skill
curl "https://clawhub.ai/api/v1/download?slug=my-skill" -o skill.zip

Install via CLI

# Install clawhub
pip install clawhub
# or: npm i -g clawhub

# Login
clawhub login                     # browser OAuth via GitHub
clawhub login --token clh_xxx     # headless token login

# Browse & Install
clawhub search "calendar"         # search by keyword
clawhub explore                   # list recently updated
clawhub inspect <slug>            # preview before install
clawhub install <slug>            # download and install
clawhub list                      # show installed skills
clawhub update [slug]             # update skill
clawhub uninstall <slug>          # remove skill

Publish a Skill

# Via CLI
clawhub skill publish ./my-skill-folder

# Via API (multipart form)
curl -X POST https://clawhub.ai/api/v1/skills \
  -H "Authorization: Bearer $CLAWHUB_TOKEN" \
  -F "slug=my-skill" \
  -F "version=1.0.0" \
  -F "files[]=@SKILL.md"

SKILL.md Format for Publishing

---
name: skill-name
description: What this skill does and when to use it
version: 1.0.0
author: Kintama
license: MIT
metadata:
  hermes:
    tags: [tag1, tag2]
    related_skills: [other-skill]
required_env:
  - API_KEY
required_binaries:
  - python3
---

# Skill Name
Content here...

Rate Limits

• Anonymous: 180 reads/min, 45 writes/min
• Authenticated: 900 reads/min, 180 writes/min

Environment Variables

CLAWHUB_TOKEN=clh_xxx           # API token
CLAWHUB_REGISTRY=               # Override registry URL (optional)
CLAWHUB_DISABLE_TELEMETRY=1     # Disable tracking