← Back to Skills Marketplace
Skillweave SDK publish smoke test
by
Nashir Jamali
· GitHub ↗
· v1.0.0
· MIT-0
89
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install skillweave-sdk-publish-smoke-test
Description
Verifies ClawHub publish flows from the TypeScript client with a non-trivial SKILL.md body.
Usage Guidance
This skill appears to be a legitimate publish smoke test, but there are two issues to resolve before installing or running it: (1) the SKILL.md requires a CLAWHUB_TOKEN (publish permission) yet the registry metadata does not list that credential — ask the publisher to add requires.env/primary credential metadata so you know what the skill needs; (2) the instructions say to 'Load secrets from .env' — do not commit .env to source control, and prefer providing a least-privilege, ephemeral CLAWHUB_TOKEN from a secrets manager or CI secret store rather than a long-lived token in a local .env. Also verify you are testing against an appropriate namespace/slug (avoid publishing to production accounts) and confirm the workflow will not leak absolute local paths or other unrelated secrets into the published bundle.
Capability Analysis
Type: OpenClaw Skill
Name: skillweave-sdk-publish-smoke-test
Version: 1.0.0
The skill bundle is a documentation-only smoke test designed to verify the publishing workflow of the Skillweave SDK to ClawHub. It contains instructions and a TypeScript code example in SKILL.md for testing the `publishSkill` function, using standard practices like environment variables for authentication. No executable code, malicious instructions, or data exfiltration attempts were found.
Capability Assessment
Purpose & Capability
The skill's stated purpose (verifying publish flows) aligns with the instructions (calling SkillweaveClient.publishSkill and validating the published artifact). However, the registry metadata declares no required environment variables or credentials while the SKILL.md explicitly requires a CLAWHUB_TOKEN with publish permission. That mismatch is unexpected and disproportionate to the declared metadata.
Instruction Scope
Instructions are narrowly scoped to building SKILL.md content, calling publishSkill, and verifying the result. They also instruct: 'Load secrets from .env' and show use of process.env.CLAWHUB_TOKEN. Loading a .env file is a standard dev convenience but can cause accidental exposure of unrelated secrets if done carelessly; the instructions do not limit which files or keys to read or how to protect them.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so it does not write or download artifacts to disk during installation. That is the lowest-risk install posture.
Credentials
The SKILL.md requires CLAWHUB_TOKEN (a publish-capable token) but the package metadata lists no required environment variables or primary credential. Requesting a publish-scoped token is reasonable for the stated purpose, but the absence of that requirement in the metadata is an incoherence. The .env instruction increases the risk of unintentionally exposing other secrets unless the user follows strict practices. No other unrelated credentials are requested.
Persistence & Privilege
The skill does not request always:true and is not asking to modify other skills or system-wide agent settings. Autonomous invocation is allowed by default and is not combined with other high-risk flags.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skillweave-sdk-publish-smoke-test - After installation, invoke the skill by name or use
/skillweave-sdk-publish-smoke-test - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the Skillweave SDK publish smoke test skill.
- Provides a repeatable checklist to validate Skillweave/ClawHub publish flows from a TypeScript client.
- Details requirements for publishing, including SKILL.md content, versioning, and file path constraints.
- Includes troubleshooting for common API errors and content validation issues.
- Offers an example TypeScript invocation and post-publish verification steps.
Metadata
Frequently Asked Questions
What is Skillweave SDK publish smoke test?
Verifies ClawHub publish flows from the TypeScript client with a non-trivial SKILL.md body. It is an AI Agent Skill for Claude Code / OpenClaw, with 89 downloads so far.
How do I install Skillweave SDK publish smoke test?
Run "/install skillweave-sdk-publish-smoke-test" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Skillweave SDK publish smoke test free?
Yes, Skillweave SDK publish smoke test is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Skillweave SDK publish smoke test support?
Skillweave SDK publish smoke test is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Skillweave SDK publish smoke test?
It is built and maintained by Nashir Jamali (@nashirjamali); the current version is v1.0.0.
More Skills