← 返回 Skills 市场
stefanferreira

Clawhub Publishing Workflow

作者 stefanferreira · GitHub ↗ · v1.0.3 · MIT-0
cross-platform ⚠ suspicious
118
总下载
0
收藏
1
当前安装
4
版本数
在 OpenClaw 中安装
/install clawhub-publishing-workflow
功能描述
Complete workflow for publishing OpenClaw skills to ClawHub - includes authentication troubleshooting, bot detection workarounds, and the mother skill philos...
使用说明 (SKILL.md)

ClawHub Publishing Workflow 🚀

Description: Complete workflow for publishing OpenClaw skills to ClawHub - includes authentication troubleshooting, bot detection workarounds, and the mother skill philosophy.

Status:PRODUCTION READY (Version 1.0.0)

🎯 When to Use

  • Publishing a new skill to ClawHub for the first time
  • Updating an existing published skill
  • Troubleshooting ClawHub authentication issues
  • Understanding bot detection challenges with ClawHub
  • Implementing the "mother skill" philosophy

📋 Prerequisites

  1. ClawHub CLI installed:

    npm install -g clawhub
    
  2. GitHub account (for ClawHub registration)

  3. ClawHub API token from: https://clawhub.ai/settings/tokens

🚀 Complete Workflow

Phase 1: Authentication (DISCOVERED METHOD)

# Get token from ClawHub settings (format: clh_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx)
# Then use the CORRECT authentication method (discovered through trial and error):
clawhub login --token "YOUR_TOKEN_HERE" --no-browser

# Verify authentication:
clawhub whoami
# Should show: ✔ your-username

# WRONG METHODS WE TRIED:
# ❌ export CLAWHUB_TOKEN="token" (doesn't work)
# ❌ echo "token" > ~/.clawhub/token (doesn't work)
# ✅ clawhub login --token "token" --no-browser (CORRECT)

Phase 2: Skill Preparation

# 1. Create skill directory structure
your-skill/
├── SKILL.md
├── references/ (optional)
├── templates/ (optional)
├── scripts/ (optional)
└── assets/ (optional)

# 2. Validate skill structure
./scripts/validate.sh

# 3. Check for personal information (critical for community sharing)
grep -i "C:\\\\\\\\\|/home/\|password\|token\|secret" SKILL.md || echo "Clean"

Phase 3: Publishing

# IMPORTANT: Version must be valid semver (2.2.0 not 2.2)
clawhub publish /path/to/your-skill \
  --slug "your-unique-slug" \
  --name "Skill Display Name" \
  --version "1.0.0" \
  --changelog "Initial release"

# Slug rules:
# - Lowercase, hyphens only
# - Must be globally unique on ClawHub
# - If taken, append "-v2" or "-backup"

Phase 4: Verification

# Skill undergoes security scan (takes a few minutes)
clawhub inspect your-slug

# Once scan completes, skill is available at:
# https://clawhub.ai/s/YOUR_USERNAME/your-slug

⚠️ Pitfalls & Solutions (LEARNED FROM EXPERIENCE)

Pitfall 1: Bot Detection (Vercel Security Checkpoint)

Symptoms: "We're verifying your browser" page blocks authentication Solution:

  • Use token authentication (clawhub login --token --no-browser)
  • For browser auth: Enable Camo Fox + residential proxies in BrowserBase

Pitfall 2: Incorrect Authentication Methods

Symptoms: "Not logged in" despite having token Solution: Use exact command: clawhub login --token TOKEN --no-browser

Pitfall 3: Invalid Semver Version

Symptoms: "--version must be valid semver" error Solution: Use proper semver: "1.0.0", "2.2.0" (not "2.2")

Pitfall 4: Slug Conflicts

Symptoms: "Only the owner can publish updates" Solution: Check slug availability, use unique slug

✅ Verification Steps

Authentication Test

clawhub whoami
# Expected: ✔ username

Skill Structure Test

# Create validation script in your skill:
cat > scripts/validate.sh \x3C\x3C 'EOF'
#!/bin/bash
echo "=== Skill Validation ==="
[ -f "SKILL.md" ] && echo "✅ SKILL.md exists" || echo "❌ SKILL.md missing"
EOF
chmod +x scripts/validate.sh

Publish Test

# No dry-run option available, so publish small test skill first

🦊 Bot Detection & Camo Fox

When Browser Auth is Required

If you need browser authentication (for token generation):

  1. Enable Camo Fox in BrowserBase dashboard
  2. Configure residential proxies
  3. Use browser with stealth features enabled

Environment Variables for BrowserBase

export BROWSERBASE_CAMO_FOX=true
export BROWSERBASE_PROXY_TYPE=residential

🐕 Mother Skill Philosophy

A mother skill is:

  • Comprehensive: End-to-end solution for a specific problem
  • Battle-tested: Proven in real-world use
  • Community-evolved: Improves with community feedback
  • Branded: British dry humour + canine wisdom (optional but fun)

Brand Elements (Optional)

  • British phrases: "Right then", "Bob's your uncle", "Sorted"
  • Canine personas: Romeo, Luna, Buster, Thomas
  • Signature: "Put that in your pipe and smoke it!"

🔧 Troubleshooting Commands

# Check CLI version
clawhub -V

# Check authentication methods
clawhub auth --help

# Get token help
clawhub login --help

# List your published skills
# Visit: https://clawhub.ai/u/YOUR_USERNAME

📁 Example Skill Structure

clawhub-publish-mother-skill/
├── SKILL.md                    # Main documentation
├── scripts/
│   ├── validate.sh            # Validation script
│   └── test-publish.sh        # Test publishing
└── references/
    ├── checklist.md           # Publishing checklist
    └── camo-fox.md           # Bot detection guide

🔄 Version History

  • v1.0.0: Initial skill creation with discovered authentication method
  • v1.0.1: Added bot detection guidance and mother skill philosophy

🤝 Community Contributions

This skill documents approaches discovered through trial and error. If you find better methods, update and share!

HELL YEAH, ClawHub publishing mastered! 🎯

Based on real discovery: clawhub login --token TOKEN --no-browser British dry humour + canine personas optional but recommended

安全使用建议
This document is largely a coherent how-to for publishing to ClawHub, but review the following before proceeding: - Verify the 'clawhub' npm package: inspect its npm page/repository and confirm the publisher/trusted source before running 'npm install -g'. Global npm installs execute code on your machine. - Be cautious with tokens: the workflow uses a ClawHub API token — do not paste tokens into untrusted prompts, do not commit them to repos, and avoid storing them in plain files or shell history. - Proxy/stealth guidance is a red flag: instructions to use residential proxies, BrowserBase Camo Fox, or 'stealth' browsers are effectively instructions to bypass bot-detection. This can violate hosting/platform terms or local law; only follow such steps if you understand the legal and policy implications and you control the relevant accounts. - Metadata mismatch: the skill metadata declares no required binaries or env vars, yet the README asks you to install a CLI and set env vars. Ask the publisher (or inspect the upstream repo) to clarify required dependencies and exact command sources. - If you plan to proceed: test with a throwaway skill and throwaway account first, limit token permissions if possible, and run npm installs in an isolated environment (container/VM) until you confirm the tooling is trustworthy. If you want, I can list commands to verify the npm package (npm view, inspect repo) and show safer ways to run and audit the cli before installing globally.
功能分析
Type: OpenClaw Skill Name: clawhub-publishing-workflow Version: 1.0.3 The skill bundle provides a legitimate workflow and documentation for publishing OpenClaw skills to ClawHub. It includes helpful authentication troubleshooting, a security-positive check for hardcoded secrets (grep command in SKILL.md), and standard CLI usage instructions for the 'clawhub' utility. No malicious code, data exfiltration, or harmful prompt injections were found.
能力评估
Purpose & Capability
The SKILL.md clearly documents a ClawHub publishing workflow, which matches the skill name/description. However, the registry metadata declared no required binaries or env vars while the instructions explicitly require the 'clawhub' CLI (npm install -g clawhub) and reference BrowserBase tooling — a minor inconsistency between declared requirements and the runtime instructions.
Instruction Scope
Instructions mostly stay within publishing tasks (login, publish, inspect). But they include guidance to bypass bot detection (use residential proxies, enable 'Camo Fox', 'stealth features') and explicit environment variable guidance for BrowserBase. Encouraging evasion of bot detection is scope-creep relative to a straightforward publishing workflow and could have legal/terms-of-service implications.
Install Mechanism
The skill is instruction-only (no install spec). SKILL.md tells users to run 'npm install -g clawhub' which will execute code from the npm ecosystem. That is a normal recommendation for a CLI but is not declared in metadata; installing a global npm package can run arbitrary code — users should verify the package source and publisher before running.
Credentials
The declared requirements list no env vars, yet the instructions tell users to export BROWSERBASE_CAMO_FOX and BROWSERBASE_PROXY_TYPE and to obtain a ClawHub API token. The docs reference environment variables and a third-party BrowserBase service without justifying why those variables must be set on the host; the mismatch should be clarified and users should avoid exporting secrets into shells or CI without understanding implications.
Persistence & Privilege
The skill is not force-enabled (always:false), is user-invocable, has no install-time persistence, and does not request elevated privileges or modify other skills. No persistence or privilege escalation is requested in the manifest or instructions.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install clawhub-publishing-workflow
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /clawhub-publishing-workflow 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.3
- Rolled back SKILL.md to version 1.0.0, removing version 1.0.1 and 1.0.2 content. - Removed detailed workflow sections such as workspace syncing, rate limits, advanced troubleshooting, and expanded pitfalls. - Streamlined publishing workflow and pitfall documentation to original release. - Kept essential authentication, structure, and publishing steps intact. - Retained original philosophy and brand notes.
v1.0.2
Document CLI 0.9.0 semver edge case and explicit --version publish fix
v1.0.1
Fix semver publishing follow-up and refresh workflow notes
v1.0.0
Initial public release
元数据
Slug clawhub-publishing-workflow
版本 1.0.3
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 4
常见问题

Clawhub Publishing Workflow 是什么?

Complete workflow for publishing OpenClaw skills to ClawHub - includes authentication troubleshooting, bot detection workarounds, and the mother skill philos... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 118 次。

如何安装 Clawhub Publishing Workflow?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install clawhub-publishing-workflow」即可一键安装,无需额外配置。

Clawhub Publishing Workflow 是免费的吗?

是的,Clawhub Publishing Workflow 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Clawhub Publishing Workflow 支持哪些平台?

Clawhub Publishing Workflow 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Clawhub Publishing Workflow?

由 stefanferreira(@stefanferreira)开发并维护,当前版本 v1.0.3。

💬 留言讨论