Discover the best ClawHub skills, inspect what they do, and install them securely in seconds without leaving VS Code.
Why Zerahlabs
Fast top-result skill search from the command palette
One-click install flow (Download and Use Now)
Safe extraction with traversal and payload checks
Clean install structure: each skill goes into its own folder (<workspace>/<skill-slug>/)
Installation tracking in .clawhub/lock.json
Commands
Zerahlabs: Search Skills
Zerahlabs: Explore Trending
Zerahlabs: Install Skill to Workspace...
Zerahlabs: Inspect Skill
Zerahlabs: Manage Installed Skills
How It Works
flowchart LR
U[User in VS Code] --> C[Command Palette]
C --> E[extension.ts]
E --> API[clawhubApi.ts]
API --> CH[(ClawHub API)]
CH --> E
E --> UI[ui.ts QuickPick + Confirm]
E --> SCN[scanner.ts Safety Scan]
SCN -->|warnings| UI
E --> INS[installer.ts]
INS --> FS[(workspace/<skill-slug>/)]
INS --> LOCK[(.clawhub/lock.json)]
Security Approach
Network timeout and controlled redirects
Archive size and file-count guardrails
Path traversal blocking during extraction
Suspicious content checks before install
Explicit user confirmation for risky packages
Local Development
npm install
npm run compile
Press F5 in VS Code to run the extension in an Extension Development Host window.
