← 返回 Skills 市场

ClawHub Publisher

Name: ClawHub Publisher
Author: sam-k-migz

作者 Sam-k-migz · GitHub ↗ · v0.1.1 · MIT-0

cross-platform ✓ 安全检测通过

112

总下载

当前安装

版本数

在 OpenClaw 中安装

/install clawhub-publisher-cli

功能描述

Use the bundled ClawHub Publisher CLI to validate, prepare, zip, and publish OpenClaw skills to ClawHub with clearer validation, cleaner packaging, and safer...

使用说明 (SKILL.md)

ClawHub Publisher

Use this skill when you need to turn a local OpenClaw skill folder into a publish-ready ClawHub package.

This repository also ships the matching CLI implementation used by the skill, and the project is intentionally self-publishable.

What it does

validates a skill folder before publish
detects common blockers like:
- missing SKILL.md
- broken YAML frontmatter
- missing name / description
- missing README
- blank hook files
- hook references that point to missing files
prepares a cleaned publish-ready output bundle
optionally exports a zip archive
runs the final clawhub publish command with explicit metadata
asks for final confirmation before publishing unless you pass --yes

Preferred workflow

From the project root:

npm install
npm run build

Use the built CLI:

node dist/index.js validate "/path/to/skill"
node dist/index.js prepare "/path/to/skill" --zip
node dist/index.js publish "/path/to/skill"

Fast non-interactive publish example

node dist/index.js publish "/path/to/skill" \
  --no-prompt \
  --slug my-skill \
  --name "My Skill" \
  --skill-version 0.1.1 \
  --changelog "Polished validation and publish UX" \
  --tags latest \
  --yes

Notes

clawhub CLI login is still required for the final publish step.
prepared output is written under .clawhub-publisher/
the source skill folder is left untouched

安全使用建议

This skill appears to be what it claims: a CLI to validate/prepare/package and then call your local 'clawhub' CLI to publish. Before using it: (1) review the included src/index.ts (already present) if you want to confirm behavior; (2) ensure you are logged into the official clawhub CLI before running publish (the tool calls that CLI via execa); (3) run validation/prepare first and inspect .clawhub-publisher and publish-report.json to verify output before allowing a publish; (4) avoid running publish --yes in directories you don't control or as a privileged user — the tool will run the external publish command which can publish files to ClawHub. If you do not have or trust the clawhub CLI, use --dry-run or the tool's validation/prepare commands only.

功能分析

Type: OpenClaw Skill Name: clawhub-publisher-cli Version: 0.1.1 The bundle contains a CLI utility ('clawhub-publisher') designed to validate, package, and publish OpenClaw skills. Analysis of the source code (src/index.ts) and instructions (SKILL.md) shows the tool performs local file system operations (validation, zipping, and cleaning) and delegates the actual publishing to the external 'clawhub' CLI via 'execa'. No evidence of data exfiltration, malicious command execution, or harmful prompt injection was found; the behavior is entirely consistent with its stated purpose as a developer tool.

能力评估

✓ Purpose & Capability

Name and description match the included code and SKILL.md. The code implements validation, prepare, zip, and a publish step that calls the external 'clawhub' CLI — all expected for a publisher tool. No unrelated credentials, binaries, or config paths are requested.

✓ Instruction Scope

SKILL.md and README clearly instruct building and running the bundled CLI. The implementation reads the target skill folder, performs validation, copies/prepares output under .clawhub-publisher, optionally creates zips, and uses execa to run the external 'clawhub publish' command. These actions are within the described scope. Note: the tool will execute the external 'clawhub' CLI (if present) and will write files into the working directory.

✓ Install Mechanism

No install spec is included in the registry metadata (instruction-only). The repository includes source and a package.json but the skill does not request any automatic download-from-URL or installs itself. Build/install steps in docs are standard for a Node CLI (npm install; npm run build).

✓ Credentials

The skill declares no required env vars, credentials, or config paths. The code uses execa to invoke external commands but does not request secrets. This is proportionate for a tool that calls an externally-authenticated 'clawhub' CLI.

✓ Persistence & Privilege

The skill is not always-enabled and does not request elevated platform privileges. It writes prepared output under a local directory (.clawhub-publisher) and creates zip/report artifacts — expected behavior for a packaging/publishing tool.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install clawhub-publisher-cli
安装完成后，直接呼叫该 Skill 的名称或使用 /clawhub-publisher-cli 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.1.1

Improved validation, reporting, docs, and safer publish UX

v0.1.0

Initial self-published release

元数据

Slug clawhub-publisher-cli

版本 0.1.1

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 2

常见问题