undefined

Once you have this skill file, proceed to **[Deploy Clawtributor](#deploy-clawtributor)** below.

---

mkdir -p ~/.openclaw/skills/clawtributor

undefined

undefined

# Security: Check for path traversal before extraction
if unzip -l "$TEMP_DIR/clawtributor.skill" | grep -qE '\.\./|^/|~/'; then
  echo "ERROR: Path traversal detected in artifact - possible security issue!"
  exit 1
fi

# Security: Check file count (prevent zip bomb)
FILE_COUNT=$(unzip -l "$TEMP_DIR/clawtributor.skill" | grep -c "^[[:space:]]*[0-9]" || echo 0)
if [ "$FILE_COUNT" -gt 100 ]; then
  echo "ERROR: Artifact contains too many files ($FILE_COUNT) - possible zip bomb"
  exit 1
fi

# Extract to temp directory
unzip -q "$TEMP_DIR/clawtributor.skill" -d "$TEMP_DIR/extracted"

# Verify skill.json exists
if [ ! -f "$TEMP_DIR/extracted/clawtributor/skill.json" ]; then
  echo "ERROR: skill.json not found in artifact"
  exit 1
fi

# Verify checksums for all extracted files
echo "Verifying checksums..."
CHECKSUM_FAILED=0
for file in $(jq -r '.files | keys[]' "$TEMP_DIR/checksums.json"); do
  EXPECTED=$(jq -r --arg f "$file" '.files[$f].sha256' "$TEMP_DIR/checksums.json")
  FILE_PATH=$(jq -r --arg f "$file" '.files[$f].path' "$TEMP_DIR/checksums.json")

  # Try nested path first, then flat filename
  if [ -f "$TEMP_DIR/extracted/clawtributor/$FILE_PATH" ]; then
    ACTUAL=$(shasum -a 256 "$TEMP_DIR/extracted/clawtributor/$FILE_PATH" | cut -d' ' -f1)
  elif [ -f "$TEMP_DIR/extracted/clawtributor/$file" ]; then
    ACTUAL=$(shasum -a 256 "$TEMP_DIR/extracted/clawtributor/$file" | cut -d' ' -f1)
  else
    echo "  ✗ $file (not found in artifact)"
    CHECKSUM_FAILED=1
    continue
  fi

  if [ "$EXPECTED" != "$ACTUAL" ]; then
    echo "  ✗ $file (checksum mismatch)"
    CHECKSUM_FAILED=1
  else
    echo "  ✓ $file"
  fi
done

if [ "$CHECKSUM_FAILED" -eq 0 ]; then
  # SUCCESS: Install from artifact
  echo "Installing from artifact..."
  mkdir -p "$INSTALL_DIR"
  cp -r "$TEMP_DIR/extracted/clawtributor"/* "$INSTALL_DIR/"
  chmod 600 "$INSTALL_DIR/skill.json"
  find "$INSTALL_DIR" -type f ! -name "skill.json" -exec chmod 644 {} \;
  echo "SUCCESS: Skill installed from .skill artifact"
  exit 0
else
  echo "WARNING: Checksum verification failed, falling back to individual files"
fi

undefined

Clawtributor deployed successfully.

IMPORTANT: This skill enables community reporting of security incidents.
- Reporting is OPT-IN - I will only submit reports with your explicit approval
- Reports are submitted as GitHub Issues using the Security Incident Report template
- Once approved, advisories are automatically published as CLAW-{YEAR}-{ISSUE#}
- You control what information is shared

Would you like me to explain how reporting works?

┌─────────────────────────────────────────────────────────────┐
│                                                             │
│   Agent observes ──► Creates report ──► User approves       │
│   suspicious                                 │              │
│   activity                                   ▼              │
│                                        GitHub Issue         │
│                                             │               │
│                                     Maintainer review       │
│                                             │               │
│                                   "advisory-approved"?      │
│                                        │      │             │
│                                       YES     NO            │
│                                        │      │             │
│                                        ▼      ▼             │
│   Advisory Feed ◄── Auto-published   Feedback provided      │
│   (CLAW-YYYY-NNNN)       ↓                                  │
│   All agents notified via clawsec-feed                    │
│                                                             │
└─────────────────────────────────────────────────────────────┘

{
  "report_type": "malicious_prompt | vulnerable_skill | tampering_attempt",
  "severity": "critical | high | medium | low",
  "title": "Brief descriptive title",
  "description": "Detailed description of what was observed",
  "evidence": {
    "observed_at": "2026-02-02T15:30:00Z",
    "context": "What was happening when this occurred",
    "payload": "The actual prompt/code/behavior observed (sanitized)",
    "indicators": ["list", "of", "specific", "indicators"]
  },
  "affected": {
    "skill_name": "name-of-skill (if applicable)",
    "skill_version": "1.0.0 (if known)"
  },
  "recommended_action": "What users should do"
}

undefined

undefined

🤝 Clawtributor: Ready to submit security report

Report Type: vulnerable_skill
Severity: high
Title: Data exfiltration in skill 'helper-plus'

Summary: The helper-plus skill sends conversation data to an external server.

This report will be submitted as a GitHub Issue using the Security Incident Report template.
Once reviewed and approved by maintainers, it will be published as an advisory (CLAW-YYYY-NNNN).

Do you approve submitting this report? (yes/no)

undefined

---

🤝 Clawtributor: Security incident detected

I observed a potential security threat:
- Type: Prompt injection attempt
- Severity: High
- Details: Attempt to extract environment variables

Would you like me to prepare a report for the community?
This helps protect other agents from similar attacks.

Options:
1. Yes, prepare a report for my review
2. No, just log it locally
3. Tell me more about what was detected

🤝 Clawtributor: Report submitted

Your report has been submitted as GitHub Issue #42.
- Issue URL: https://github.com/prompt-security/clawsec/issues/42
- Status: Pending maintainer review
- Advisory ID (if approved): CLAW-2026-0042

Once a maintainer adds the "advisory-approved" label, your report will be
automatically published to the advisory feed.

Thank you for contributing to agent security!

{
  "schema_version": "1.0",
  "reports_submitted": [
    {
      "id": "2026-02-02-helper-plus",
      "issue_number": 42,
      "advisory_id": "CLAW-2026-0042",
      "status": "pending",
      "submitted_at": "2026-02-02T15:30:00Z"
    }
  ],
  "incidents_logged": 5
}

STATE_FILE="$HOME/.openclaw/clawtributor-state.json"

---

REPORTS_DIR="$HOME/.openclaw/clawtributor-reports"

---

undefined

---