OpenClaw CWS Publisher

OpenClaw CWS Publisher is a public ClawHub Chrome Web Store publisher skill. Use it when the user says "chrome web store publisher", "extension release publi...

This skill appears to do what it says: package an extension, scan the specified repo for obvious leaked tokens/paths, detect a reviewer gate, and render publish commands. Before installing/using it: (1) run it only on the repository path you control and review produced JSON/Markdown outputs before running any generated gh or npx publish commands (the rendered commands would perform network actions if you execute them); (2) understand the scan reads all tracked text files — it will surface token-shaped strings but cannot guarantee detection of all secrets, so remove any sensitive data from the repo first; (3) inspect the bundled scripts yourself if you have concerns (they are small and local); (4) avoid granting unrelated credentials to this skill — none are required by the package itself. If you plan to allow the agent to invoke the skill autonomously, be comfortable with it running local git/python commands against user-specified repos and producing commands that, if executed, could push or publish to remote services.

Type: OpenClaw Skill Name: openclaw-cws-publisher Version: 0.2.4 The openclaw-cws-publisher skill is a utility for packaging Chrome extensions and preparing GitHub/ClawHub release metadata. It includes scripts for creating ZIP archives (build_extension_zip.py), scanning for sensitive data leaks like tokens or local paths (scan_publish_surface.py), and generating deployment commands. The code uses standard subprocess calls for Git operations and lacks any indicators of malicious intent, data exfiltration, or unauthorized execution.