← Back to Skills Marketplace
yinwuzhe

TOSR Publish Then Update Test

by yuangui · GitHub ↗ · v0.2.0 · MIT-0
cross-platform ⚠ suspicious
75
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install tosr-test-pub-update-1776925224
Description
Automated test skill validating creation, inspection, update, and deletion of skills via the clawhub REST API lifecycle.
Usage Guidance
This skill will attempt to create, update, inspect, and delete skills via the clawhub REST API but does not specify which host or how to authenticate. Before installing or running it: (1) Do not run this against a production clawhub instance. (2) Ask the author to provide the base URL and explicit authentication requirements (what env vars or token are needed) and to declare them in requires.env. (3) Prefer running the test in an isolated/staging environment you control and verify cleanup behavior. (4) If you can't get clear auth/host instructions, decline installation — the skill could perform destructive actions unintentionally. (5) Consider disabling autonomous invocation until you confirm safe defaults and credentials.
Capability Analysis
Type: OpenClaw Skill Name: tosr-test-pub-update-1776925224 Version: 0.2.0 The skill bundle consists of metadata and documentation for an automated integration test (tosr-test-pub-update-1776925224) designed to verify the lifecycle of skills on the ClawHub API. There is no executable code, and the instructions in SKILL.md are purely descriptive of testing procedures (publish, inspect, update, delete) without any indicators of malicious intent or prompt injection.
Capability Assessment
Purpose & Capability
The skill's purpose is an integration test that creates, updates, inspects, and deletes skills via the clawhub REST API — that capability is coherent with the name/description. However, exercising the clawhub API typically requires a base URL and authentication; the skill declares no required environment variables, no primary credential, and gives only relative endpoints (e.g. POST /api/v1/skills) with no host or auth instructions. The lack of declared credentials or target host is inconsistent with the stated capability.
Instruction Scope
SKILL.md explicitly directs the agent to perform destructive operations (publish, update, delete) against the 'real clawhub API' but provides no host, auth, headers, rate-limit/safety checks, or rollback/confirmation steps. That leaves broad discretion to the agent and risks unintended mutations on a production registry if run. The file also claims ephemeral cleanup but gives no mechanism or guarantees.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, which minimizes installation risk — nothing is downloaded or written to disk by the skill itself.
Credentials
No environment variables or credentials are declared despite the skill needing to call protected API endpoints to create/update/delete skills. That mismatch is suspicious: the skill either assumes implicit platform-provided credentials (not documented) or omits required sensitive inputs, both of which are problematic.
Persistence & Privilege
The skill does not request permanent presence (always:false) and is user-invocable. Autonomous invocation (model-invocation allowed) is the platform default; by itself this is not a new privilege. Still, autonomous execution combined with the destructive API calls described above increases risk if the skill were run without review.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install tosr-test-pub-update-1776925224
  3. After installation, invoke the skill by name or use /tosr-test-pub-update-1776925224
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.2.0
- Updated version number to 0.2.0. - Refreshed test identifier version and created timestamp in SKILL.md.
v0.1.0
- Initial release of the tosr-test-pub-update-1776925224 skill for automated integration testing. - Verifies full lifecycle: create, inspect, update, and delete operations through the clawhub REST API. - Designed as an ephemeral skill for cleanup after test completion. - Provides metadata including slug, version, and timestamps for tracking test runs.
Metadata
Slug tosr-test-pub-update-1776925224
Version 0.2.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is TOSR Publish Then Update Test?

Automated test skill validating creation, inspection, update, and deletion of skills via the clawhub REST API lifecycle. It is an AI Agent Skill for Claude Code / OpenClaw, with 75 downloads so far.

How do I install TOSR Publish Then Update Test?

Run "/install tosr-test-pub-update-1776925224" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is TOSR Publish Then Update Test free?

Yes, TOSR Publish Then Update Test is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does TOSR Publish Then Update Test support?

TOSR Publish Then Update Test is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created TOSR Publish Then Update Test?

It is built and maintained by yuangui (@yinwuzhe); the current version is v0.2.0.

💬 Comments