Skip to content

ClawScan Alert Response

Investigates ClawScan health alerts and scanner failures, and routes validated verdict errors upstream.

Stars
9,546
Licence
MIT
Files
3 files

What it does

When installed, the agent treats a ClawScan alert or scan complaint as something to investigate before acting. It works out whether the alert is real, whether a failure is operational or a wrong security verdict, and which component owns the fault (ClawHub, ClawScan, or an upstream scanner such as SkillSpector or AI-Infra-Guard). It writes up evidence, makes only repairs it is authorized to make, and reports verified inaccuracies to the owner rather than changing the verdict itself.

Great for

  • Maintainers of the ClawHub repository responding to ClawScan health alerts
  • Developers triaging a scanner failure or a disputed completed verdict in a ClawHub checkout
  • Teams that need an evidence-first, delegated investigation workflow with a clear hand-off to component owners

Skip it if

  • Account ban appeals, which the skill explicitly routes to a separate clawhub-ban-appeals skill because that skill owns the appeal decision
  • Non-developers or anyone without access to ClawHub's internal monitoring and repository, since the workflow depends on those read surfaces and repo checkouts
  • Making production deployments or moderation decisions on its own, since the skill states it grants no deployment, moderation, publication, or communication authority

Try asking

  • “Investigate why a ClawScan health alert fired for the last hour and say whether it is still active”
  • “Diagnose why the ClawScan scanner stage failed for a specific skill artifact and identify the failing boundary”
  • “Check whether a completed malicious verdict on a skill is accurate and prepare an upstream report if it is wrong”
  • “Prepare a sanitized regression test for a confirmed ClawHub report-mapping defect”
Step-by-step guide: how to use ClawScan Alert ResponseInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 3 original files, the MIT licence and an attribution note.

    clawhub-clawscan.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip clawhub-clawscan.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip clawhub-clawscan.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Give the agent the exact alert permalink, firing time window and artifact identity so it can correlate evidence rather than guess.
  • Expect it to separate historical failures from current state; ask for fresh observations if you need to know whether an alert is still active.
  • Keep final notifications and deployments with the human admin, since the skill is designed to hand those steps back.

What's inside

  • references/evidence-and-tools.md
  • references/upstream-reporting.md
  • SKILL.md

Redistributed unmodified from openclaw/clawhub under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-11-02. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.