Publish Guard

Publish Guard is a public ClawHub pre-release audit skill. Use it when the user says "publish guard", "release audit", "pre-release check", or wants to revie...

Publish Guard appears to do what it says: it runs local Python scripts to detect leak patterns and audit public-facing docs. Before enabling or running it, consider: 1) it will read all scannable files under whatever repository path you give it (including README.md, SKILL.md, .env-like files and other text files), so do not point it at a workspace that contains unrelated secrets or private repos; 2) it does not request credentials or perform remote calls in the bundled scripts, and the code performs redaction of sensitive-looking snippets, but filenames and metadata may still appear in outputs; 3) confirm Python is available (python3 or python), and review the included scripts yourself if you have concerns; and 4) if you allow autonomous invocation, be aware the agent could run these scans without an explicit prompt — restrict invocation or test in a sandboxed workspace if you want an extra safety margin.

Type: OpenClaw Skill Name: public-surface-review Version: 1.0.4 The skill bundle is a legitimate utility designed to audit repositories for sensitive information and documentation quality before public release. The included scripts (such as scan_leaks.py and scan_public_surface.py) use regular expressions to identify potential secret leaks (e.g., AWS keys, GitHub tokens) and internal documentation patterns, with the leak scanner explicitly redacting sensitive values in its output to prevent accidental exposure. There is no evidence of data exfiltration, unauthorized network access, or malicious command execution.