← 返回 Skills 市场

Clawhub Publisher

Name: Clawhub Publisher
Author: shepherd217

作者 Shepherd217 · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

1299

总下载

当前安装

版本数

在 OpenClaw 中安装

/install clawhub-publisher

功能描述

Automate skill publishing to ClawHub with versioning, changelog generation, asset bundling, metadata validation, and one-command deployment.

使用说明 (SKILL.md)

ClawHub Publisher

Version: 1.0.0
Author: Midas Skills
License: MIT

Description

Automated skill publishing to ClawHub. Version management, changelog generation, asset bundling, one-command deploy.

Value Proposition

Automated skill publishing to ClawHub. Version management, changelog generation, asset bundling, instant deployment.

Skill Type

developer-tool

Pricing

Free: $0
Pro: $59.99

Key Features

✅ One-command skill publishing
✅ Automatic version bumping (major/minor/patch)
✅ Git-powered changelog generation
✅ Multi-file asset bundling
✅ Metadata validation
✅ README optimization
✅ Gumroad link injection
✅ Publishing history & rollback
✅ Skill analytics
✅ Team collaboration support
✅ CI/CD integration (GitHub Actions, etc.)

Use Cases

Automatic skill versioning & deployment
One-command publish workflow
Changelog auto-generation
Multi-file asset bundling
Gumroad integration & upsell linking
Skill stats & analytics dashboard
Rolling back bad deployments
Team publishing workflows

Installation

npm install clawhub-publisher
# or
pip install clawhub-publisher

Quick Start

const Publisher = require('clawhub-publisher');

const publisher = new Publisher({
  apiKey: process.env.CLAWHUB_API_KEY,
  author: 'Your Name',
  gumroadLink: 'https://gumroad.com/your-product'
});

const result = await publisher.publish({
  skillPath: './my-skill',
  version: '1.0.0',
  changelog: 'Initial release with core features'
});

console.log('Published to:', result.clawHubUrl);

Repository

https://github.com/midas-skills/clawhub-publisher

Support

📧 [email protected]
🔗 Docs: https://docs.midas-skills.com/clawhub-publisher

安全使用建议

This skill's documentation shows a publisher that requires installing an external npm/pip package and an API key (CLAWHUB_API_KEY), but the distributed bundle contains only documentation and package metadata (no index.js or CLI), and the registry metadata does not declare the API key requirement. Before installing or giving any secrets: 1) Verify the referenced package exists on npm/PyPI and inspect its source (or the GitHub repository) to confirm behavior and trustworthiness; 2) Confirm the CLAWHUB_API_KEY is the only credential required and that it can be scoped to publishing (not a full admin/other-service key); 3) Prefer to run installs in an isolated environment (sandbox/container) and audit the package contents before running; 4) Ask the publisher to update registry metadata to list required env vars and include or link to the implementation so you can review it. If you cannot inspect the external package or repository, treat this skill as higher risk and avoid providing sensitive credentials.

功能分析

Type: OpenClaw Skill Name: clawhub-publisher Version: 1.0.0 The skill bundle describes a legitimate developer tool for automated skill publishing to 'ClawHub'. All files (metadata, skill instructions, package configuration, and extensive documentation) align with the stated purpose. The `SKILL.md` and `README.md` provide clear instructions and code examples for users, including how to configure an API key (`process.env.CLAWHUB_API_KEY`), which is standard for such tools. There is no evidence of prompt injection attempts against the AI agent, data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The functionality described is consistent with a benign publishing utility.

能力评估

⚠ Purpose & Capability

The skill claims to be a 'ClawHub Publisher' (publishing, changelogs, bundling, analytics) and shows example usage that requires an external package (clawhub-publisher) and an environment variable (process.env.CLAWHUB_API_KEY). However, the skill bundle contains no runtime code or binaries, and the registry metadata lists no required environment variables or primary credential. That mismatch (described capability vs. actual footprint) is incoherent: either this skill is only documentation/instructions or it omits critical required credentials and code.

ℹ Instruction Scope

The SKILL.md stays within the publishing domain (reading a skillPath, generating changelog from git, interacting with ClawHub via an API key). It does instruct use of git metadata and local skill directories (skillPath), which is expected for a publisher. However, the instructions reference an environment variable (CLAWHUB_API_KEY) and remote operations (publishing, analytics, team management) that are not declared in the registry metadata—this is a scope/requirements mismatch that should be reconciled.

⚠ Install Mechanism

There is no install spec in the registry bundle; SKILL.md tells users/agents to run npm or pip installs (npm install clawhub-publisher). That means runtime behavior depends on fetching an external package from package registries. The package.json in the bundle references an index.js and a CLI, but those files are not included in this skill bundle. This forces installing and executing external code to get the described functionality—reasonable for a publisher tool but higher risk because the bundle doesn't include or verify that external code.

⚠ Credentials

The example usage and CI instructions require an API key (CLAWHUB_API_KEY) and possibly other secrets (CI secrets for GitHub Actions). Yet the registry metadata declares no required env vars or primary credential. Requesting an API key for publishing is reasonable, but not declaring it in metadata and not providing the implementation to show how it's used is a red flag. Ensure only a service-scoped publishing token is requested and that the skill does not ask for unrelated credentials.

✓ Persistence & Privilege

The skill does not request persistent always-on presence and default autonomy settings are unchanged. There is no evidence it modifies other skills or global agent config. No persistence/privilege escalation indicators in the provided files.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install clawhub-publisher
安装完成后，直接呼叫该 Skill 的名称或使用 /clawhub-publisher 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Production-ready skill

元数据

Slug clawhub-publisher

版本 1.0.0

许可证 —

累计安装 6

当前安装数 5

历史版本数 1

常见问题