openclaw/clawhub v0.19.0

clawhub 0.19.0

on GitHub

0.19.0 - 2026-06-03

Changes

• CLI/API: add authenticated clawhub scan submit/poll support for ephemeral local skill bundles and owner-authorized published skill scans, including JSON output and report ZIP downloads (#2479).

Fixes

• Auth/Ops: keep GitHub account-age lookups on immutable numeric IDs, retry without auth when a configured GitHub token is rejected, and add an operator backfill for missing cached account ages.
• API/CLI: report Skill Card verification with flattened skill/version metadata, ClawScan verdict fields at security.*, and supporting scanner evidence under security.signals.

Release Proof

• npm: https://www.npmjs.com/package/clawhub/v/0.19.0
• tarball: https://registry.npmjs.org/clawhub/-/clawhub-0.19.0.tgz
• integrity: sha512-GOBL9ZZTf/6PpZx1HiERsgc8GnKhVIyKzF7Kyl2cTsYysCeJnv4KS5KrayUoZT9R0BhSxCpY8iemF//P2pGVxA==
• npm preflight: https://github.com/openclaw/clawhub/actions/runs/26985226827
• npm publish: https://github.com/openclaw/clawhub/actions/runs/26985263998