← Back to Skills Marketplace
274
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install skill-publish-adapter-real
Description
技能发布适配器：自动绕过ClawHub所有已知问题，将发布成功率从15%提升到70%。用户无需查看ClawHub源码即可成功发布技能。
Usage Guidance
This skill downloads and runs shell scripts from a remote GitHub raw URL and performs filesystem and publishing actions — that can execute arbitrary code. Before installing: 1) Inspect the referenced install.sh and skill-publish-adapter.sh in the remote repository (raw URL) and verify their contents and author. 2) Verify the repository owner and commit history (who maintains it). 3) Prefer a bundled package or published release with checksums/signatures rather than executing raw scripts. 4) Run the tool in an isolated environment (container, VM) or sandbox first, and avoid running it on systems with sensitive credentials or keys. 5) Ask the publisher to declare required env vars/credentials and to include the scripts in the package or a verifiable release. If you can provide the contents of the remote scripts (install.sh / skill-publish-adapter.sh), I can review them and reduce uncertainty.
Capability Analysis
Type: OpenClaw Skill
Name: skill-publish-adapter-real
Version: 2.0.0
The skill bundle exhibits several red flags, including a significant discrepancy between the package name in package.json (@clawhub/skill-validator) and the skill name in SKILL.md (skill-publish-adapter), as well as inconsistent GitHub handles for the author. The SKILL.md file contains instructions for the AI agent to download and execute external shell scripts via curl from a third-party repository (github.com/puppetcat-fire), which is a high-risk pattern for remote code execution. While the tool claims to 'bypass' platform bugs to improve publishing success rates, this framing combined with the external script fetching and missing local source code (install.sh) warrants a suspicious classification.
Capability Assessment
Purpose & Capability
The SKILL.md claims a publish-adapter but package.json identifies a different package name/author (skill-validator / xiaoboren) and lists files that are not included in the bundle. The skill asks to download and execute external shell scripts to perform its core work — that could be reasonable for a CLI helper, but the metadata mismatch and absent local scripts are incoherent.
Instruction Scope
Runtime instructions direct the agent/user to download and run ./skill-publish-adapter.sh and ./install.sh from a remote raw.githubusercontent.com URL, modify files and permissions, create missing files, and perform publishing steps (including to GitHub). The SKILL.md also references environment variables (CLAWHUB_USER, GITHUB_USER, DEBUG) and implies credential use, but the registry declares no required env vars — the instructions access/require more than what is declared.
Install Mechanism
There is no install spec in the registry (instruction-only), but the SKILL.md recommends fetching shell scripts from raw.githubusercontent.com and then running them. Downloading and executing arbitrary scripts from the network is high-risk: GitHub raw is a common host but content can change and executing remote shells without review can run arbitrary code on the user's machine.
Credentials
Registry declares no required credentials, yet SKILL.md shows use of CLAWHUB_USER and GITHUB_USER and implies GitHub/ClawHub publishing (which typically requires auth tokens or SSH keys). Required binaries differ between registry metadata (bash, jq, tar, git) and package.json (bash, jq, find, grep, sed). The skill may need credentials not declared here — that's disproportionate and undeclared.
Persistence & Privilege
The skill is not flagged always:true and does not declare system-wide modifications, but its workflow writes files, fixes permissions, creates archives, and executes scripts — normal for a publish tool but potentially persistent. No direct evidence it modifies other skills or agent config; risk stems from executing fetched scripts.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skill-publish-adapter-real - After installation, invoke the skill by name or use
/skill-publish-adapter-real - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.0
Skill-publish-adapter 2.0.0 (重大版本更新)
适配器现可自动处理并绕过ClawHub的绝大多数已知问题，将技能发布成功率从15%提升至70%。
- 新增自动修复功能，可一键修正权限、格式及缺失文件等常见问题
- 深度检验技能，识别并报告所有影响发布的兼容性与格式错误
- 智能化发布流程，支持ClawHub和GitHub等多平台，自动重试直至成功
- 加强日志与DEBUG模式，便于排查疑难错误
- 提供批量处理、CI/CD示例与高级自定义配置，满足多场景需求
Metadata
Frequently Asked Questions
What is Skill Publish Adapter Real?
技能发布适配器：自动绕过ClawHub所有已知问题，将发布成功率从15%提升到70%。用户无需查看ClawHub源码即可成功发布技能。 It is an AI Agent Skill for Claude Code / OpenClaw, with 274 downloads so far.
How do I install Skill Publish Adapter Real?
Run "/install skill-publish-adapter-real" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Skill Publish Adapter Real free?
Yes, Skill Publish Adapter Real is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Skill Publish Adapter Real support?
Skill Publish Adapter Real is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Skill Publish Adapter Real?
It is built and maintained by 渡鸦大人 (@puppetcat-fire); the current version is v2.0.0.
More Skills