openclaw/clawhub
1
0
Fork 0
mirror of https://github.com/openclaw/clawhub.git synced 2026-07-21 19:25:25 -04:00
Code Issues 183 Packages Projects Releases 1 Wiki Activity

Skill flagged — suspicious patterns detected #119

New Issue
Open
opened 2026-02-15 17:15:47 -05:00 by yindo · 0 comments
yindo commented 2026-02-15 17:15:47 -05:00
Owner
Copy Link
Copy Source

Originally created by @hammadtq on GitHub (Feb 11, 2026).

Hi,

I am the author of openbotauth skill: https://clawhub.ai/hammadtq/openbotauth

The open source repository for the skill is hosted here: https://github.com/openBotAuth/openbotauth

OpenBotAuth is a reference of implementation of Web Bot Auth, an IETF draft proposal for agent identities on the web: https://datatracker.ietf.org/doc/draft-meunier-web-bot-auth-architecture/

Identities in our implementation are linked to Github oAuth, a human needs to interact with the website, that leads the website to generate a token, our skill then uses that token to link its locally generated keypair with that oAuth token. This way we do the identity linking between a human and a bot. Since this step is manual, hence token pasting is required.

If you could tell me how to rectify or follow a more secure pattern for authentication or if you think the skill was flagged for some other reason, I will be keen to fix this issue.

Originally created by @hammadtq on GitHub (Feb 11, 2026). Hi, I am the author of openbotauth skill: https://clawhub.ai/hammadtq/openbotauth The open source repository for the skill is hosted here: https://github.com/openBotAuth/openbotauth OpenBotAuth is a reference of implementation of Web Bot Auth, an IETF draft proposal for agent identities on the web: https://datatracker.ietf.org/doc/draft-meunier-web-bot-auth-architecture/ Identities in our implementation are linked to Github oAuth, a human needs to interact with the website, that leads the website to generate a token, our skill then uses that token to link its locally generated keypair with that oAuth token. This way we do the identity linking between a human and a bot. Since this step is manual, hence token pasting is required. If you could tell me how to rectify or follow a more secure pattern for authentication or if you think the skill was flagged for some other reason, I will be keen to fix this issue.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
pull-request
Mirrored from GitHub Pull Request
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: openclaw/clawhub#119
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?