@@ -128,15 +128,19 @@ shared, and gated, see [Skills](/tools/skills).
128128129129## Service features
130130131-| Feature | Notes |
132-| ------------------ | ---------------------------------------------------------- |
133-| Public browsing | Skills and their `SKILL.md` content are publicly viewable. |
134-| Search | Embedding-powered (vector search), not just keywords. |
135-| Versioning | Semver, changelogs, and tags (including `latest`). |
136-| Downloads | Zip per version. |
137-| Stars and comments | Community feedback. |
138-| Moderation | Approvals and audits. |
139-| CLI-friendly API | Suitable for automation and scripting. |
131+| Feature | Notes |
132+| ------------------------ | ------------------------------------------------------------------- |
133+| Public browsing | Skills and their `SKILL.md` content are publicly viewable. |
134+| Search | Embedding-powered (vector search), not just keywords. |
135+| Versioning | Semver, changelogs, and tags (including `latest`). |
136+| Downloads | Zip per version. |
137+| Stars and comments | Community feedback. |
138+| Security scan summaries | Detail pages show the latest scan state before install or download. |
139+| Scanner detail pages | VirusTotal, ClawScan, and static-analysis results have deep links. |
140+| Owner recovery dashboard | Publishers can see scan-held owned content from `/dashboard`. |
141+| Owner-requested rescans | Owners can request limited rescans for false-positive recovery. |
142+| Moderation | Approvals and audits. |
143+| CLI-friendly API | Suitable for automation and scripting. |
140144141145## Security and moderation
142146@@ -145,6 +149,16 @@ account must be **at least one week old** to publish. This slows down
145149abuse without blocking legitimate contributors.
146150147151<AccordionGroup>
152+<Accordion title="Security scans">
153+ClawHub runs automated security checks on published skills and plugin
154+releases. Public detail pages summarize the current result, and scanner
155+rows link to dedicated detail pages for VirusTotal, ClawScan, and static
156+analysis.
157+158+Scan-held or blocked releases may be unavailable on public catalog and
159+install surfaces while still visible to their owner in `/dashboard`.
160+161+</Accordion>
148162<Accordion title="Reporting">
149163- Any signed-in user can report a skill.
150164- Report reasons are required and recorded.
@@ -276,6 +290,23 @@ publish/sync.
276290- `--json` — emit machine-readable output for CI.
277291- `--source-repo`, `--source-commit`, `--source-ref` — optional overrides when auto-detection is not enough.
278292293+</Accordion>
294+<Accordion title="Request rescans">
295+```bash
296+clawhub skill rescan <slug>
297+clawhub skill rescan <slug> --yes --json
298+299+clawhub package rescan <name>
300+clawhub package rescan <name> --yes --json
301+```
302+303+Rescan commands require a logged-in owner token and target the latest
304+published skill version or plugin release. In non-interactive runs, pass
305+`--yes`.
306+307+JSON responses include the target kind, name, version, rescan status, and
308+remaining/max request counts for that version or release.
309+279310</Accordion>
280311<Accordion title="Delete / undelete (owner or admin)">
281312```bash
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。