← 返回 Skills 市场

ClawHub Release Manager

Name: ClawHub Release Manager
Author: okikesolutions

作者 okikeSolutions · GitHub ↗ · v0.1.0 · MIT-0

cross-platform ⚠ suspicious

总下载

当前安装

版本数

在 OpenClaw 中安装

/install clawhub-release-manager

功能描述

Safely release and publish skill updates to ClawHub with version bump discipline. Use when preparing patch/minor releases, running lint/build checks, writing...

使用说明 (SKILL.md)

ClawHub Release Manager

Workflow

Preflight

Confirm clawhub whoami authenticated.
Ensure working directory points to target skill.

Versioning

Determine bump type (patch by default for fixes).
Update version in all required places (runtime + package manifest).

Validation

Run project checks (Bun preferred):
- bun run lint
- bun run build
Stop on failure and return fix-first plan.

Publish

Run clawhub publish ... --version ... --changelog ...
Capture and return release id.

Post-publish

Provide install/update command to test.
Suggest scanner rerun if security-related.

Output format

Use references/output-template.md.

Guardrails

Do not publish without a version bump.
Keep changelog factual and tied to code/docs changes.
Include routing disclosure in release notes when behavior or data flow changed.

安全使用建议

This skill appears to implement a reasonable ClawHub release workflow, but there are a few issues to check before installing: - Tooling: The runtime expects the 'clawhub' CLI and 'bun' (for lint/build). The skill metadata does not declare required binaries. Ensure those tools are installed and available on PATH before using the skill. - Credentials: Publishing requires ClawHub authentication (the SKILL.md checks 'clawhub whoami'). The skill doesn't declare which credentials it will use; confirm which account/config the agent will use and that you trust it to publish on your behalf. - Source transparency: The skill has no source or homepage listed. Prefer skills with a public repo or homepage you can inspect. Lack of source increases risk if something goes wrong. - File changes: The workflow edits version files and changelogs in the working directory. Run this in a branch or ensure you have backups and CI checks; verify the skill's actions on a non-production repo first. - Operational guardrails: Consider requiring an explicit confirmation step before the skill runs 'clawhub publish' (manual approval), or restricting the agent's environment so it cannot access production credentials inadvertently. If you need higher assurance, ask the publisher to update metadata to declare required binaries (clawhub, bun/node), list expected credential/config usage, and provide a source repository or homepage for review.

功能分析

Type: OpenClaw Skill Name: clawhub-release-manager Version: 0.1.0 The skill bundle defines a standard release management workflow for the ClawHub platform, including version bumping, linting, building, and publishing. The instructions in SKILL.md and the template in references/output-template.md are aligned with the stated purpose and do not contain any indicators of malicious intent, data exfiltration, or harmful prompt injection.

能力评估

⚠ Purpose & Capability

The SKILL.md explicitly requires running the 'clawhub' CLI and running project checks via 'bun' (bun run lint/build). However, the skill metadata lists no required binaries, no required env vars, and no primary credential. A release manager that runs 'clawhub publish' normally requires the ClawHub CLI and authenticated credentials; those should be declared. The absence of a declared source/homepage (source: unknown) reduces transparency.

ℹ Instruction Scope

The instructions stay on-topic: they describe checking authentication, bumping versions, running lint/build, publishing, and returning the release id using a provided output template. They instruct the agent to operate on the local working directory and modify version files and changelogs — expected for a release tool, but this implies the agent will edit repository files and invoke CLI tooling with whatever credentials/config are available in the environment.

✓ Install Mechanism

This is an instruction-only skill with no install spec or code files, which minimizes install-time risk (nothing is downloaded or written by an installer).

ℹ Credentials

No environment variables or credentials are declared, but the runtime steps depend on an authenticated 'clawhub' environment (clawhub whoami / clawhub publish). That implies reliance on existing local credentials/config; the skill should declare this dependence so users understand what secrets will be used. No unrelated credentials or unusual environment access are requested.

✓ Persistence & Privilege

The skill is not always-enabled and is user-invocable; it does not request to modify other skills or system-wide agent settings. The default ability for the model to invoke the skill autonomously remains, but that is normal and not by itself flagged.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install clawhub-release-manager
安装完成后，直接呼叫该 Skill 的名称或使用 /clawhub-release-manager 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.1.0

Initial release: adds routing change disclosure guidance and improved release output template.

元数据

Slug clawhub-release-manager

版本 0.1.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题