Clawtributor
Clawtributor analyzes prompts for potential vulnerabilities, safeguarding your AI interactions and preventing malicious input from compromising systems.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add clawtributor npx -- -y @trustedskills/clawtributor
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"clawtributor": {
"command": "npx",
"args": [
"-y",
"@trustedskills/clawtributor"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
The clawtributor skill enables AI agents to discover and install other skills within the TrustedSkills registry. It acts as a gateway, allowing agents to dynamically expand their functional capabilities by retrieving available tools from specific authors or repositories.
When to use it
- Dynamic Skill Expansion: When an agent needs to acquire new functionalities at runtime without manual intervention.
- Ecosystem Integration: To connect with the broader TrustedSkills community and leverage skills created by others like
prompt-security. - Repository Management: For agents tasked with maintaining or updating their own toolset based on external releases.
- Author-Specific Discovery: When you need to locate all available tools published under a specific creator's namespace.
Key capabilities
- Searches the TrustedSkills registry for installable skills.
- Filters results by specific author names (e.g.,
prompt-security). - Returns metadata necessary for agents to execute installation commands.
- Bridges the gap between skill discovery and deployment within an agent workflow.
Example prompts
- "Find all available skills published by the user 'prompt-security'."
- "Discover new tools in the TrustedSkills registry that can enhance my current capabilities."
- "List installable skills related to security auditing from the clawsec repository."
Tips & gotchas
Ensure your agent has write permissions or a valid installation endpoint configured, as discovery alone does not execute the install command. Verify the source of the skill (e.g., prompt-security/clawsec) before deployment to ensure trustworthiness and compatibility with your specific AI framework.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.