---
title: "Discussion on \"I Ran SkillCompass on the Top 100 ClawHub Skills: Here's What I Found\" | Hashnode"
description: "Discussion on \"I Ran SkillCompass on the Top 100 ClawHub Skills: Here's What I Found\". TL’DR:\n\nOne CRITICAL command injection flaw\n\nA supply-chain prompt injection risk\n\n~199,000 installs exposed to documented vulnerabilities\n\nThe most popular skill in the ecosystem has a near-failing s"
url: "https://hashnode.com/posts/i-ran-skillcompass-on-the-top-100-clawhub-skills-here-s-what-i-found/69ccfab0b504c4ed0a778018"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [I Ran SkillCompass on the Top 100 ClawHub Skills: Here's What I Found](https://johnspaghetti.hashnode.dev/i-ran-skillcompass-on-the-top-100-clawhub-skills-here-s-what-i-found?utm_source=hashnode&utm_medium=feed)

TL’DR: One CRITICAL command injection flaw A supply-chain prompt injection risk ~199,000 installs exposed to documented vulnerabilities The most popular skill in the ecosystem has a near-failing s

Apr 1 · 7 min read · johnspaghetti.hashnode.dev  
Read the article

## Written by

[John Smith](https://hashnode.com/@johnspaghetti)

@johnspaghetti · Singapore

  
[View profile](https://hashnode.com/@johnspaghetti)

Building in AI. Love Spaghetti.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.