Security scan stuck for monolith releases (since v0.1.7), download API 404

[slaviquee]

Summary

The security scan appears stuck for Monolith releases on ClawHub, and versions stay hidden/unavailable for an extended period.

• Skill URL: https://clawhub.ai/slaviquee/monolith
• This started at v0.1.7 and affected subsequent versions as well.

Affected version details

• Version: v0.1.9
• sha256: b6331a150463d2c37e93b16de9f30f6e04df6d3f45b15bc7a714da6212a99f7a
• Approx publish timing: still stuck ~14 hours after publish

Symptoms

1. Security scan remains in-progress/stuck and the skill/version is hidden.
2. Download endpoint returns 404:
   • .../api/v1/download?slug=monolith&version=0.1.9
   • Response: 404 Skill not found
3. VirusTotal reports 0 detections for the artifact.

Request

Could maintainers please:

1. Investigate and unstick the scan record server-side for the affected versions.
2. Confirm whether the hidden state is incorrectly tied to a stale/pending scan record.
3. Advise if publisher-side action is needed, or if this is fully a registry-side repair.

Thanks.

[slaviquee]

v0.1.10 artifact is downloadable:
https://wry-manatee-359.convex.site/api/v1/download?slug=monolith&version=0.1.10
SHA-256 of that v0.1.10 zip (computed from the download):
67336041eeca27bb2da757e1980bd3f6cba0f529ce785aaabf53bf2127e22c00
VT link to include:
https://www.virustotal.com/gui/file/67336041eeca27bb2da757e1980bd3f6cba0f529ce785aaabf53bf2127e22c00
Symptom: “VT report exists (incl. Code Insights), but ClawHub UI still shows Security scan: Pending after 1 hour.