← 返回 Skills 市场
Skillweave SDK publish smoke test
作者
Nashir Jamali
· GitHub ↗
· v1.0.0
· MIT-0
89
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install skillweave-sdk-publish-smoke-test
功能描述
Verifies ClawHub publish flows from the TypeScript client with a non-trivial SKILL.md body.
安全使用建议
This skill appears to be a legitimate publish smoke test, but there are two issues to resolve before installing or running it: (1) the SKILL.md requires a CLAWHUB_TOKEN (publish permission) yet the registry metadata does not list that credential — ask the publisher to add requires.env/primary credential metadata so you know what the skill needs; (2) the instructions say to 'Load secrets from .env' — do not commit .env to source control, and prefer providing a least-privilege, ephemeral CLAWHUB_TOKEN from a secrets manager or CI secret store rather than a long-lived token in a local .env. Also verify you are testing against an appropriate namespace/slug (avoid publishing to production accounts) and confirm the workflow will not leak absolute local paths or other unrelated secrets into the published bundle.
功能分析
Type: OpenClaw Skill
Name: skillweave-sdk-publish-smoke-test
Version: 1.0.0
The skill bundle is a documentation-only smoke test designed to verify the publishing workflow of the Skillweave SDK to ClawHub. It contains instructions and a TypeScript code example in SKILL.md for testing the `publishSkill` function, using standard practices like environment variables for authentication. No executable code, malicious instructions, or data exfiltration attempts were found.
能力评估
Purpose & Capability
The skill's stated purpose (verifying publish flows) aligns with the instructions (calling SkillweaveClient.publishSkill and validating the published artifact). However, the registry metadata declares no required environment variables or credentials while the SKILL.md explicitly requires a CLAWHUB_TOKEN with publish permission. That mismatch is unexpected and disproportionate to the declared metadata.
Instruction Scope
Instructions are narrowly scoped to building SKILL.md content, calling publishSkill, and verifying the result. They also instruct: 'Load secrets from .env' and show use of process.env.CLAWHUB_TOKEN. Loading a .env file is a standard dev convenience but can cause accidental exposure of unrelated secrets if done carelessly; the instructions do not limit which files or keys to read or how to protect them.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so it does not write or download artifacts to disk during installation. That is the lowest-risk install posture.
Credentials
The SKILL.md requires CLAWHUB_TOKEN (a publish-capable token) but the package metadata lists no required environment variables or primary credential. Requesting a publish-scoped token is reasonable for the stated purpose, but the absence of that requirement in the metadata is an incoherence. The .env instruction increases the risk of unintentionally exposing other secrets unless the user follows strict practices. No other unrelated credentials are requested.
Persistence & Privilege
The skill does not request always:true and is not asking to modify other skills or system-wide agent settings. Autonomous invocation is allowed by default and is not combined with other high-risk flags.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install skillweave-sdk-publish-smoke-test - 安装完成后，直接呼叫该 Skill 的名称或使用
/skillweave-sdk-publish-smoke-test触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of the Skillweave SDK publish smoke test skill.
- Provides a repeatable checklist to validate Skillweave/ClawHub publish flows from a TypeScript client.
- Details requirements for publishing, including SKILL.md content, versioning, and file path constraints.
- Includes troubleshooting for common API errors and content validation issues.
- Offers an example TypeScript invocation and post-publish verification steps.
元数据
常见问题
Skillweave SDK publish smoke test 是什么？
Verifies ClawHub publish flows from the TypeScript client with a non-trivial SKILL.md body. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 89 次。
如何安装 Skillweave SDK publish smoke test？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skillweave-sdk-publish-smoke-test」即可一键安装，无需额外配置。
Skillweave SDK publish smoke test 是免费的吗？
是的，Skillweave SDK publish smoke test 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Skillweave SDK publish smoke test 支持哪些平台？
Skillweave SDK publish smoke test 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Skillweave SDK publish smoke test？
由 Nashir Jamali（@nashirjamali）开发并维护，当前版本 v1.0.0。
推荐 Skills