Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

ClawHub

clawhub.ai

Post reply on HN
Print view View original

11–20 of 43 posts

Re: ClawHub

#11

Post by CuriouslyC »

clandry94 wrote: post #5
arnvald wrote: post #4

Do these skills actually provide much value? Like, how much better are they than something that I could tell Claude to generate based on a single API doc from Slack/Trello?

From my experience, most are just some high level instructions on how to use CLI tools installed on the system. A lot of the CLI tools they're calling out to have 0 reputation on Github or don't work at all. I've had more luck writing my own skills using CLI tools I know and trust.

That's a big part of the reason skills are exploding, people use them as stealth marketing in addition to being a malware injection vector.

Re: ClawHub

#12

Post by raffkede »

arnvald wrote: post #4

Do these skills actually provide much value? Like, how much better are they than something that I could tell Claude to generate based on a single API doc from Slack/Trello?

Skills is actually what also Claude code uses internally, it's cool because the llm will load the whole context on how to use it only on demand and keeps the context cleaner.

Re: ClawHub

#14

Post by Nextgrid »

ru552 wrote: post #10
free_bip wrote: post #8

Who is scanning these skills for malware? This seems like a prime target for malicious actors.

Virustotal at upload and periodically during the day

VirusTotal is completely useless for this though? You need enough people to be pwned by that particular piece of malware for it to be flagged as dangerous, by which point the attackers would've already repacked it so it doesn't match the previous signature.

Re: ClawHub

#19

Post by isodev »

So let's recap:

- I click skills.

- The first one is WireGuard "... secure routing and key management".

- I'd download it, hook it to this bot running on my system.

- I'd ask the bot to store / manage super-secret keys that protect actual servers with user data and personal details and god knows what...

- The bot follows my commands by spelunking random snippets of markdown, running other programs on my computer, doing web searches, reading what it finds on the web and giving itself more commands to do...

I've only been in tech for like 20 years or so but I feel like either I'm missing something substantial or some kind of madness is happening to people.

Post reply on HN