ClawHub Acceptable Usage Policy: Allowed Content and Guidelines

Acceptable Usage

OpenClaw uses ClawHub to distribute skills, plugins, packages, and marketplace metadata. This page helps you determine if your content or publishing practices are appropriate for ClawHub.

These guidelines cover what a listing does, what code it asks users to run, how it presents itself, and how publishers interact with ClawHub's discovery, installation, and trust features. For information on moderation states and account status, refer to Moderation and Account Safety. For copyright or other rights concerns, see Content Rights Requests.

Allowed content

ClawHub accepts content that is helpful, clear, and published with honest intent.

Category	Allowed when
Developer productivity	The listing assists users in building, testing, migrating, debugging, documenting, or running software.
UI, data, and automation workflows	The purpose is well-defined, required credentials are stated, and dangerous actions include review, dry-run, preview, or confirmation steps.
Defensive security, moderation, and abuse review	The tool is presented for authorized auditing, preserves evidence, and maintains explicit human approval boundaries.
Personal or team workflows	The workflow relies on consent-based accounts, transparent configuration, and explicit permissions.
Maintained catalogs	Each listing is unique, valuable, accurately described, and kept reasonably up to date.

Context matters. A topic may be acceptable in a narrow defensive or consent-based scenario but unacceptable when packaged as an abuse workflow.

Disallowed content

ClawHub does not host content whose primary purpose involves abuse, deception, unsafe execution, or rights violations.

Category	Not allowed
Unauthorized access or security bypass	Authentication bypass, account hijacking, rate-limit abuse, live call or agent takeover, reusable session theft, or auto-approving pairing flows for unauthorized users.
Platform abuse and ban evasion	Stealth accounts after bans, account warming or farming, fake engagement, multi-account automation, mass posting, spam bots, or automation built to evade detection.
Fraud, scams, and deceptive financial workflows	Fake certificates or invoices, deceptive payment flows, scam outreach, fake social proof, synthetic-identity workflows for fraud, or spending/charging tools without clear human approval.
Privacy-invasive enrichment or surveillance	Contact scraping for spam, doxxing, stalking, lead extraction paired with unsolicited outreach, covert monitoring, non-consensual biometric matching, or use of leaked data or breach dumps.
Non-consensual impersonation or identity manipulation	Face swap, digital twins, cloned influencers, fake personas, or other tooling used to impersonate or mislead.
Explicit sexual content or safety-disabled adult generation	NSFW image, video, or content generation; adult-content wrappers around third-party APIs; or listings whose primary purpose is explicit sexual content.
Hidden, unsafe, or misleading execution requirements	Obfuscated install commands, pipe-to-shell installers such as downloaded content run with `sh` or `bash` without clear reviewability, undeclared secret or private-key requirements, remote `npx @latest` execution without clear reviewability, or metadata that hides what the listing really needs to run.
Copyright-infringing or rights-violating material	Republishing someone else's skill, plugin, docs, brand assets, or proprietary code without permission; violating license terms; or impersonating the original author or publisher.

Disallowed marketplace behavior

ClawHub also monitors how publishers use the marketplace. Do not use ClawHub to manipulate discovery, metrics, trust signals, moderation systems, or user attention.

Disallowed marketplace behavior includes:

bulk publishing large numbers of low-effort, duplicative, placeholder, or machine-generated listings that do not appear to have real user value
flooding search or category surfaces with near-identical skills or plugins
publishing hundreds of listings with little or no usage, maintenance, source clarity, or meaningful differentiation
artificially inflating installs, downloads, stars, or other engagement metrics through automation, self-install loops, fake accounts, coordinated activity, paid engagement, or other non-organic behavior
creating or rotating accounts to evade moderation, bans, publisher limits, or marketplace review
misleading users about ownership, source, capabilities, security posture, install requirements, or affiliation with another project or publisher
repeatedly uploading content that has already been hidden, removed, or blocked without fixing the underlying issue

High-volume publishing is not automatically abuse. Large catalogs are acceptable when the listings are meaningfully different, accurately described, maintained, and used by real users. Large catalogs become a trust and safety problem when volume is paired with thin, duplicative, misleading, unmaintained, or artificially promoted listings.

Content rights

If you believe content on ClawHub infringes your copyright or other rights, use Content Rights Requests. Do not use normal marketplace reports for copyright or rights claims unless the listing is also unsafe, malicious, or misleading.

Review and enforcement

ClawHub may use automated checks, statistical abuse signals, user reports, and staff review to identify unsafe content or abusive publishing behavior. A signal does not prove abuse by itself; it helps ClawHub decide what needs review.

We may:

hide, hold, remove, soft-delete, or, where supported for the resource type, hard-delete violating listings
block downloads or installs for unsafe releases
revoke API tokens
soft-delete associated content
restrict publishing access
ban repeat or severe offenders

We do not guarantee warning-first enforcement for obvious abuse. See Moderation and Account Safety for reports, moderation holds, hidden listings, bans, and account standing.