feat: Add support for Clawhub Skill Scanner using Agent by abhisek · Pull Request #678 · safedep/vet

abhisek · 2026-02-08T05:44:17Z

feat: Add clawhub skill scanner agent
feat: Add support for agent context compaction
chore: Add support for prompt debugging
fix: Prompt and add docs

…bility https://github.com/bytedance/sonic/releases/tag/v1.15.0

safedep · 2026-02-08T05:44:21Z

SafeDep Report Summary

Package Details

Package	Malware	Vulnerability	Risky License	Report
`cloud.google.com/go @ v0.123.0` _go _go.mod	✔️	✔️	✔️	🔗
`cloud.google.com/go/auth @ v0.18.1` _go _go.mod	✔️	✔️	✔️	🔗
`cloud.google.com/go/auth/oauth2adapt @ v0.2.8` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/anthropics/anthropic-sdk-go @ v1.21.0` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/aws/aws-sdk-go-v2 @ v1.41.1` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream @ v1.7.4` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/aws/aws-sdk-go-v2/config @ v1.32.7` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/aws/aws-sdk-go-v2/credentials @ v1.19.7` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/aws/aws-sdk-go-v2/feature/ec2/imds @ v1.18.17` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/aws/aws-sdk-go-v2/internal/configsources @ v1.4.17` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 @ v2.7.17` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/aws/aws-sdk-go-v2/internal/ini @ v1.8.4` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding @ v1.13.4` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url @ v1.13.17` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/aws/aws-sdk-go-v2/service/signin @ v1.0.5` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/aws/aws-sdk-go-v2/service/sso @ v1.30.9` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/aws/aws-sdk-go-v2/service/ssooidc @ v1.35.13` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/aws/aws-sdk-go-v2/service/sts @ v1.41.6` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/aws/smithy-go @ v1.24.0` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/bytedance/gopkg @ v0.1.3` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/bytedance/sonic @ v1.15.0` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/bytedance/sonic/loader @ v0.5.0` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/cloudwego/eino @ v0.7.32` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/cloudwego/eino-ext/components/model/claude @ v0.1.15` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/cloudwego/eino-ext/components/model/gemini @ v0.1.28` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/cloudwego/eino-ext/components/model/openai @ v0.1.8` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/cloudwego/eino-ext/components/tool/mcp @ v0.0.8` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/cloudwego/eino-ext/libs/acl/openai @ v0.1.13` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/eino-contrib/jsonschema @ v1.0.3` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/googleapis/enterprise-certificate-proxy @ v0.3.11` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/googleapis/gax-go/v2 @ v2.17.0` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/invopop/jsonschema @ v0.13.0` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/mailru/easyjson @ v0.9.1` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/mark3labs/mcp-go @ v0.43.2` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/meguminnnnnnnnn/go-openai @ v0.1.1` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/sirupsen/logrus @ v1.9.4` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/spf13/cast @ v1.10.0` _go _go.mod	✔️	✔️	✔️	🔗
`github.com/tidwall/match @ v1.2.0` _go _go.mod	✔️	✔️	✔️	🔗
`go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc @ v0.65.0` _go _go.mod	✔️	✔️	✔️	🔗
`go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp @ v0.65.0` _go _go.mod	✔️	✔️	✔️	🔗
`go.opentelemetry.io/otel @ v1.40.0` _go _go.mod	✔️	✔️	✔️	🔗
`go.opentelemetry.io/otel/metric @ v1.40.0` _go _go.mod	✔️	✔️	✔️	🔗
`go.opentelemetry.io/otel/trace @ v1.40.0` _go _go.mod	✔️	✔️	✔️	🔗
`golang.org/x/arch @ v0.23.0` _go _go.mod	✔️	✔️	✔️	🔗
`golang.org/x/crypto @ v0.47.0` _go _go.mod	✔️	✔️	✔️	🔗
`golang.org/x/exp @ v0.0.0-20260112195511-716be5621a96` _go _go.mod	✔️	✔️	✔️	🔗
`golang.org/x/mod @ v0.32.0` _go _go.mod	✔️	✔️	✔️	🔗
`golang.org/x/net @ v0.49.0` _go _go.mod	✔️	✔️	✔️	🔗
`golang.org/x/oauth2 @ v0.34.0` _go _go.mod	✔️	✔️	✔️	🔗
`golang.org/x/sync @ v0.19.0` _go _go.mod	✔️	✔️	✔️	🔗
`golang.org/x/sys @ v0.40.0` _go _go.mod	✔️	✔️	✔️	🔗
`golang.org/x/term @ v0.39.0` _go _go.mod	✔️	✔️	✔️	🔗
`golang.org/x/text @ v0.33.0` _go _go.mod	✔️	✔️	✔️	🔗
`golang.org/x/time @ v0.14.0` _go _go.mod	✔️	✔️	✔️	🔗
`golang.org/x/tools @ v0.41.0` _go _go.mod	✔️	✔️	✔️	🔗
`google.golang.org/api @ v0.265.0` _go _go.mod	✔️	✔️	✔️	🔗
`google.golang.org/genai @ v1.45.0` _go _go.mod	✔️	✔️	✔️	🔗
`google.golang.org/genproto @ v0.0.0-20260128011058-8636f8732409` _go _go.mod	✔️	✔️	✔️	🔗
`google.golang.org/genproto/googleapis/api @ v0.0.0-20260128011058-8636f8732409` _go _go.mod	✔️	✔️	✔️	🔗
`google.golang.org/genproto/googleapis/rpc @ v0.0.0-20260203192932-546029d2fa20` _go _go.mod	✔️	✔️	✔️	🔗

_{This report is generated by SafeDep Github App}

codecov · 2026-02-08T05:48:32Z

Codecov Report

❌ Patch coverage is 39.70588% with 410 lines in your changes missing coverage. Please review.
✅ Project coverage is 9.32%. Comparing base (8acfada) to head (c30e0dd).
⚠️ Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
pkg/clawhub/tools.go	0.00%	163 Missing ⚠️
pkg/clawhub/client.go	0.00%	75 Missing ⚠️
cmd/agent/clawhub_scanner.go	0.00%	69 Missing ⚠️
agent/tui/model.go	75.12%	45 Missing and 6 partials ⚠️
agent/react.go	0.00%	23 Missing ⚠️
agent/llm.go	0.00%	10 Missing ⚠️
agent/debug.go	82.50%	5 Missing and 2 partials ⚠️
cmd/agent/main.go	0.00%	4 Missing ⚠️
agent/agent.go	0.00%	3 Missing ⚠️
agent/tui/event.go	66.66%	2 Missing ⚠️
... and 2 more

Additional details and impacted files

@@           Coverage Diff            @@
##            main    #678      +/-   ##
========================================
+ Coverage   8.83%   9.32%   +0.48%     
========================================
  Files        303     311       +8     
  Lines      42556   43223     +667     
========================================
+ Hits        3761    4031     +270     
- Misses     38468   38857     +389     
- Partials     327     335       +8

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

github-actions · 2026-02-08T05:48:35Z

vet Summary Report

This report is generated by vet

Policy Checks

✅ Vulnerability
✅ Malware
✅ License
❌ Popularity
❌ Maintenance
✅ Security Posture
✅ Threats

Malicious Package Analysis

Malicious package analysis was performed using SafeDep Cloud API

Malicious Package Analysis Report

Ecosystem	Package	Version	Status	Report
ECOSYSTEM_GO	github.com/aws/aws-sdk-go-v2/service/ssooidc	1.35.13	✅	🔗
ECOSYSTEM_GO	github.com/mailru/easyjson	0.9.1	✅	🔗
ECOSYSTEM_GO	golang.org/x/arch	0.23.0	✅	🔗
ECOSYSTEM_GO	golang.org/x/crypto	0.47.0	✅	🔗
ECOSYSTEM_GO	go.opentelemetry.io/otel/metric	1.40.0	✅	🔗
ECOSYSTEM_GO	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	0.65.0	✅	🔗
ECOSYSTEM_GO	github.com/aws/aws-sdk-go-v2/service/signin	1.0.5	✅	🔗
ECOSYSTEM_GO	github.com/cloudwego/eino	0.7.32	✅	🔗
ECOSYSTEM_GO	github.com/cloudwego/eino-ext/components/model/claude	0.1.15	✅	🔗
ECOSYSTEM_GO	github.com/googleapis/gax-go/v2	2.17.0	✅	🔗
ECOSYSTEM_GO	golang.org/x/mod	0.32.0	✅	🔗
ECOSYSTEM_GO	golang.org/x/tools	0.41.0	✅	🔗
ECOSYSTEM_GO	github.com/mark3labs/mcp-go	0.43.2	✅	🔗
ECOSYSTEM_GO	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	0.65.0	✅	🔗
ECOSYSTEM_GO	github.com/meguminnnnnnnnn/go-openai	0.1.1	✅	🔗
ECOSYSTEM_GO	github.com/cloudwego/eino-ext/components/model/openai	0.1.8	✅	🔗
ECOSYSTEM_GO	github.com/aws/smithy-go	1.24.0	✅	🔗
ECOSYSTEM_GO	golang.org/x/sys	0.40.0	✅	🔗
ECOSYSTEM_GO	golang.org/x/term	0.39.0	✅	🔗
ECOSYSTEM_GO	go.opentelemetry.io/otel/trace	1.40.0	✅	🔗
ECOSYSTEM_GO	github.com/aws/aws-sdk-go-v2/config	1.32.7	✅	🔗
ECOSYSTEM_GO	github.com/cloudwego/eino-ext/components/model/gemini	0.1.28	✅	🔗
ECOSYSTEM_GO	golang.org/x/time	0.14.0	✅	🔗
ECOSYSTEM_GO	github.com/aws/aws-sdk-go-v2/feature/ec2/imds	1.18.17	✅	🔗
ECOSYSTEM_GO	github.com/aws/aws-sdk-go-v2/internal/configsources	1.4.17	✅	🔗
ECOSYSTEM_GO	github.com/aws/aws-sdk-go-v2/service/sso	1.30.9	✅	🔗
ECOSYSTEM_GO	golang.org/x/net	0.49.0	✅	🔗
ECOSYSTEM_GO	go.opentelemetry.io/otel	1.40.0	✅	🔗
ECOSYSTEM_GO	github.com/cloudwego/eino-ext/components/tool/mcp	0.0.8	✅	🔗
ECOSYSTEM_GO	golang.org/x/exp	0.0.0-20260112195511-716be5621a96	✅	🔗
ECOSYSTEM_GO	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	2.7.17	✅	🔗
ECOSYSTEM_GO	github.com/cloudwego/eino-ext/libs/acl/openai	0.1.13	✅	🔗
ECOSYSTEM_GO	google.golang.org/genproto/googleapis/api	0.0.0-20260128011058-8636f8732409	✅	🔗
ECOSYSTEM_GO	google.golang.org/genai	1.45.0	✅	🔗
ECOSYSTEM_GO	cloud.google.com/go	0.123.0	✅	🔗
ECOSYSTEM_GO	github.com/sirupsen/logrus	1.9.4	✅	🔗
ECOSYSTEM_GO	github.com/tidwall/match	1.2.0	✅	🔗
ECOSYSTEM_GO	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	1.13.4	✅	🔗
ECOSYSTEM_GO	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream	1.7.4	✅	🔗
ECOSYSTEM_GO	github.com/aws/aws-sdk-go-v2/credentials	1.19.7	✅	🔗
ECOSYSTEM_GO	github.com/bytedance/gopkg	0.1.3	✅	🔗
ECOSYSTEM_GO	cloud.google.com/go/auth/oauth2adapt	0.2.8	✅	🔗
ECOSYSTEM_GO	github.com/invopop/jsonschema	0.13.0	✅	🔗
ECOSYSTEM_GO	google.golang.org/genproto/googleapis/rpc	0.0.0-20260203192932-546029d2fa20	✅	🔗
ECOSYSTEM_GO	github.com/aws/aws-sdk-go-v2	1.41.1	✅	🔗
ECOSYSTEM_GO	github.com/bytedance/sonic/loader	0.5.0	✅	🔗
ECOSYSTEM_GO	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	1.13.17	✅	🔗
ECOSYSTEM_GO	github.com/aws/aws-sdk-go-v2/internal/ini	1.8.4	✅	🔗
ECOSYSTEM_GO	cloud.google.com/go/auth	0.18.1	✅	🔗
ECOSYSTEM_GO	golang.org/x/oauth2	0.34.0	✅	🔗
ECOSYSTEM_GO	github.com/aws/aws-sdk-go-v2/service/sts	1.41.6	✅	🔗
ECOSYSTEM_GO	github.com/bytedance/sonic	1.15.0	✅	🔗
ECOSYSTEM_GO	github.com/spf13/cast	1.10.0	✅	🔗
ECOSYSTEM_GO	github.com/googleapis/enterprise-certificate-proxy	0.3.11	✅	🔗
ECOSYSTEM_GO	golang.org/x/sync	0.19.0	✅	🔗
ECOSYSTEM_GO	github.com/eino-contrib/jsonschema	1.0.3	✅	🔗
ECOSYSTEM_GO	github.com/anthropics/anthropic-sdk-go	1.21.0	✅	🔗

ℹ️ 57 packages have been actively analyzed for malicious behaviour.
✅ No malicious packages found.

Note: Some of the package analysis jobs may still be running.Please check back later. Consider increasing the timeout for better coverage.

Changed Packages

✅ [Go] github.com/bytedance/sonic/loader@0.5.0
✅ [Go] github.com/cloudwego/eino-ext/components/model/openai@0.1.8
⚠️ [Go] github.com/tidwall/match@1.2.0
✅ [Go] github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@1.7.4
✅ [Go] golang.org/x/tools@0.41.0
✅ [Go] github.com/cloudwego/eino@0.7.32
✅ [Go] google.golang.org/api@0.265.0
✅ [Go] github.com/cloudwego/eino-ext/components/model/claude@0.1.15
✅ [Go] go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@0.65.0
⚠️ [Go] github.com/invopop/jsonschema@0.13.0
✅ [Go] golang.org/x/crypto@0.47.0
✅ [Go] go.opentelemetry.io/otel/metric@1.40.0
✅ [Go] github.com/bytedance/gopkg@0.1.3
✅ [Go] google.golang.org/genproto/googleapis/api@0.0.0-20260128011058-8636f8732409
✅ [Go] golang.org/x/mod@0.32.0
✅ [Go] go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@0.65.0
✅ [Go] github.com/aws/aws-sdk-go-v2/internal/configsources@1.4.17
✅ [Go] google.golang.org/genai@1.45.0
✅ [Go] github.com/aws/aws-sdk-go-v2/credentials@1.19.7
✅ [Go] cloud.google.com/go/auth@0.18.1
✅ [Go] golang.org/x/arch@0.23.0
✅ [Go] google.golang.org/genproto/googleapis/rpc@0.0.0-20260203192932-546029d2fa20
✅ [Go] golang.org/x/sync@0.19.0
✅ [Go] github.com/cloudwego/eino-ext/components/model/gemini@0.1.28
✅ [Go] github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@1.13.17
✅ [Go] github.com/sirupsen/logrus@1.9.4
✅ [Go] github.com/mark3labs/mcp-go@0.43.2
✅ [Go] github.com/cloudwego/eino-ext/libs/acl/openai@0.1.13
✅ [Go] github.com/aws/aws-sdk-go-v2/internal/ini@1.8.4
⚠️ [Go] github.com/meguminnnnnnnnn/go-openai@0.1.1
✅ [Go] go.opentelemetry.io/otel@1.40.0
✅ [Go] golang.org/x/exp@0.0.0-20260112195511-716be5621a96
✅ [Go] github.com/aws/smithy-go@1.24.0
✅ [Go] golang.org/x/oauth2@0.34.0
✅ [Go] golang.org/x/time@0.14.0
✅ [Go] google.golang.org/genproto@0.0.0-20260128011058-8636f8732409
✅ [Go] golang.org/x/sys@0.40.0
✅ [Go] github.com/googleapis/gax-go/v2@2.17.0
✅ [Go] cloud.google.com/go/auth/oauth2adapt@0.2.8
✅ [Go] github.com/aws/aws-sdk-go-v2/config@1.32.7
✅ [Go] github.com/anthropics/anthropic-sdk-go@1.21.0
✅ [Go] github.com/aws/aws-sdk-go-v2/service/signin@1.0.5
✅ [Go] github.com/aws/aws-sdk-go-v2/service/sts@1.41.6
✅ [Go] github.com/spf13/cast@1.10.0
✅ [Go] golang.org/x/text@0.33.0
✅ [Go] github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@2.7.17
✅ [Go] github.com/googleapis/enterprise-certificate-proxy@0.3.11
✅ [Go] github.com/cloudwego/eino-ext/components/tool/mcp@0.0.8
✅ [Go] golang.org/x/net@0.49.0
✅ [Go] golang.org/x/term@0.39.0
✅ [Go] github.com/aws/aws-sdk-go-v2@1.41.1
✅ [Go] github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@1.13.4
⚠️ [Go] github.com/eino-contrib/jsonschema@1.0.3
⚠️ [Go] github.com/mailru/easyjson@0.9.1
✅ [Go] github.com/aws/aws-sdk-go-v2/service/ssooidc@1.35.13
✅ [Go] cloud.google.com/go@0.123.0
✅ [Go] go.opentelemetry.io/otel/trace@1.40.0
✅ [Go] github.com/aws/aws-sdk-go-v2/service/sso@1.30.9
✅ [Go] github.com/bytedance/sonic@1.15.0
✅ [Go] github.com/aws/aws-sdk-go-v2/feature/ec2/imds@1.18.17

Policy Violations

Packages Violating Policy

[Go] `github.com/tidwall/match@1.2.0` 🔗

➡️ Found in manifest go.mod
⚠️ Component appears to be unmaintained

[Go] `github.com/invopop/jsonschema@0.13.0` 🔗

➡️ Found in manifest go.mod
⚠️ Component appears to be unmaintained

[Go] `github.com/meguminnnnnnnnn/go-openai@0.1.1` 🔗

➡️ Found in manifest go.mod
⚠️ Component popularity is low by Github stars count
⚡ Use an alternative package that is popular

[Go] `github.com/eino-contrib/jsonschema@1.0.3` 🔗

➡️ Found in manifest go.mod
⚠️ Component popularity is low by Github stars count
⚡ Use an alternative package that is popular

[Go] `github.com/mailru/easyjson@0.9.1` 🔗

➡️ Found in manifest go.mod
⚠️ Component appears to be unmaintained

devin-ai-integration

Devin Review found 2 potential issues.

View 8 additional findings in Devin Review.

pkg/clawhub/tools.go

pkg/clawhub/client.go

devin-ai-integration

Devin Review found 1 new potential issue.

View 13 additional findings in Devin Review.

pkg/clawhub/client.go

devin-ai-integration

Devin Review found 1 new potential issue.

View 14 additional findings in Devin Review.

pkg/clawhub/tools.go

devin-ai-integration

Devin Review found 1 new potential issue.

View 18 additional findings in Devin Review.

cmd/agent/clawhub_scanner.go

abhisek and others added 5 commits February 7, 2026 00:13

feat: Add clawhub skill scanner agent

1bf3c89

feat: Add support for agent context compaction

5c4d794

fix: Update github.com/bytedance/sonic to v1.15.0 for Go 1.26 compati…

7e3aea3

…bility https://github.com/bytedance/sonic/releases/tag/v1.15.0

chore: Add support for prompt debugging

3cc1a1e

fix: Prompt and add docs

0474a55

devin-ai-integration bot reviewed Feb 8, 2026

View reviewed changes

pkg/clawhub/tools.go Outdated Show resolved Hide resolved

pkg/clawhub/client.go Outdated Show resolved Hide resolved

abhisek added 3 commits February 8, 2026 11:31

docs: Update README

57098ee

Merge branch 'go1.26' into feat/add-clawhub-skill-scanner-agent

4d1f60d

fix: Check generated workflow

6f092c6

abhisek mentioned this pull request Feb 8, 2026

fix: Update github.com/bytedance/sonic to v1.15.0 for Go 1.26 compatibility #677

Closed

abhisek added 3 commits February 8, 2026 12:05

fix: Misc fixes

b39be73

fix: Prompt to handle unreadable files

c6dd899

fix: Update README banner

e269147

devin-ai-integration bot reviewed Feb 8, 2026

View reviewed changes

pkg/clawhub/client.go Outdated Show resolved Hide resolved

fix: Add limit on zip file download

905a67f

devin-ai-integration bot reviewed Feb 8, 2026

View reviewed changes

pkg/clawhub/tools.go Show resolved Hide resolved

abhisek added 4 commits February 8, 2026 13:11

refactor: Separate agent TUI style into independent concern

d5f403c

fix: Missing content size

7a56bb7

feat: Add support for rendering thinking status

51e07d5

fix: Bug in TUI report rendering

acdd669

devin-ai-integration bot reviewed Feb 8, 2026

View reviewed changes

cmd/agent/clawhub_scanner.go Show resolved Hide resolved

abhisek added 4 commits February 8, 2026 14:28

fix: Set min compact size

008764d

fix: Report rendering

e4dfae5

chore: Add script for clawhub skill download

2a2427a

fix: Update scanner prompt based on real life attacks

c30e0dd

Sahilb315 approved these changes Feb 9, 2026

View reviewed changes

abhisek merged commit 1bc7798 into main Feb 9, 2026
15 of 16 checks passed

abhisek deleted the feat/add-clawhub-skill-scanner-agent branch February 9, 2026 07:41

stefanb mentioned this pull request Feb 11, 2026

go 1.26.0, go@1.25 1.25.7 (new formula) Homebrew/homebrew-core#258912

Merged

72 tasks

Comments

Conversation

abhisek commented Feb 8, 2026 • edited by devin-ai-integration bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

safedep bot commented Feb 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

SafeDep Report Summary

Uh oh!

codecov bot commented Feb 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

github-actions bot commented Feb 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

vet Summary Report

Policy Checks

Malicious Package Analysis

Changed Packages

Packages Violating Policy

[Go] github.com/tidwall/match@1.2.0 🔗

[Go] github.com/invopop/jsonschema@0.13.0 🔗

[Go] github.com/meguminnnnnnnnn/go-openai@0.1.1 🔗

[Go] github.com/eino-contrib/jsonschema@1.0.3 🔗

[Go] github.com/mailru/easyjson@0.9.1 🔗

Uh oh!

devin-ai-integration bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

devin-ai-integration bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

devin-ai-integration bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

devin-ai-integration bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

abhisek commented Feb 8, 2026 •

edited by devin-ai-integration bot

Loading

safedep bot commented Feb 8, 2026 •

edited

Loading

codecov bot commented Feb 8, 2026 •

edited

Loading

github-actions bot commented Feb 8, 2026 •

edited

Loading

[Go] `github.com/tidwall/match@1.2.0` 🔗

[Go] `github.com/invopop/jsonschema@0.13.0` 🔗

[Go] `github.com/meguminnnnnnnnn/go-openai@0.1.1` 🔗

[Go] `github.com/eino-contrib/jsonschema@1.0.3` 🔗

[Go] `github.com/mailru/easyjson@0.9.1` 🔗