What ClawHub will not host
ClawHub is for useful, reviewable agent tooling. Skills that improve developer workflows, migrations, security review, or product implementation belong here. Abuse workflows do not.
Rejection Categories
Bypass and unauthorized access
Auth bypass, account takeover, CAPTCHA bypass, Cloudflare or anti-bot evasion, rate-limit bypass, reusable session theft, live call or agent takeover.
Platform abuse and ban evasion
Stealth accounts after bans, account warming/farming, fake engagement, multi-account automation, spam posting, marketplace or social automation built to avoid detection.
Fraud and deception
Fake certificates, fake invoices, deceptive payment flows, fake social proof, scam outreach, or synthetic-identity workflows built to create accounts for fraud.
Privacy-invasive surveillance
Mass contact scraping for spam, doxxing, stalking, covert monitoring, biometric / face-matching workflows without clear consent, or buying, publishing, downloading, or operationalizing leaked data or breach dumps.
Non-consensual impersonation
Face swap, digital twins, cloned influencers, fake personas, or other identity manipulation used to impersonate or mislead.
Explicit sexual content
NSFW image, video, or text generation, especially wrappers around third-party APIs with safety checks disabled.
Hidden or misleading execution
Obfuscated install commands, curl | sh, undeclared secret requirements, undeclared private-key use, or remote npx @latest execution without reviewability.
Recent patterns we are explicitly okay with
The line is intent and execution. Reviewable tooling for real work stays; tooling optimized for evasion, deception, or non-consensual use gets rejected.
Useful, consent-based tooling
Abuse workflows in disguise
If you are reviewing a borderline workflow, use the reviewer doc. If you are browsing, stay in the public catalog.