ClawdHub Publish Helper

• Verdict: Pass
• Confidence: Medium
• Analyzed: Apr 5, 2026, 5:25 AM
• Findings: 0
• Version: 1.0.1

Overview

The skill's instructions and requirements are internally consistent with a publish-helper: it audits a skill directory, creates a sanitized copy, commits it to git, and runs the ClawHub publish command — nothing requested appears unrelated to that purpose, but be aware it will read all files and invokes runtime tools (git/npx/grep) that are not declared in the metadata.

This skill appears to do what it says, but be cautious before running it: 1) It will read every file in the skill directory — run it only on a directory you trust or on a copy. 2) Ensure git, Node/npm (for npx), and standard shell tools (grep, sed/awk if you use them) are available — the metadata does not declare these. 3) Inspect the generated publishable copy before running the npx publish command — the SKILL.md asks for user confirmation before publishing, and you should verify there are no remaining secrets and that the slug/version are correct. 4) Because npx downloads the CLI at publish time, ensure you trust the npm package being invoked (clawhub). If you want extra safety, perform the steps manually following this checklist rather than letting the agent run them autonomously.