ClawHub

Python Packaging

v1.0.0

Deep Python packaging workflow—pyproject metadata, dependencies and optional extras, build backends, wheels, versioning, publishing, and CI release hygiene....

⭐ 0· 69·0 current·0 all-time
byClawKK@codekungfu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name and description match the SKILL.md content: advice on pyproject, build backends, wheels, versioning, and CI publishing. No unrelated binaries, credentials, or config paths are requested.
✓
Instruction Scope
The instructions are advisory and staged; they do not instruct the agent to read arbitrary system files, exfiltrate data, or call external endpoints. They do discuss publishing and CI practices but do not require the agent to perform network operations or access secrets.
✓
Install Mechanism
There is no install spec and no code shipped with the skill (instruction-only), so nothing is written to disk or downloaded during install.
✓
Credentials
The skill declares no environment variables, credentials, or config paths. While it talks about publishing (which in practice requires tokens/CI secrets), the skill itself does not request or assume any secrets.
✓
Persistence & Privilege
always is false and there is no mechanism for the skill to persist configuration or alter other skills; autonomous invocation is allowed (the platform default) but the skill does not request elevated privileges.
Assessment
This skill is a safe, high-level guide for packaging Python projects. It does not access your files, tokens, or install software by itself. If you use it to implement a publish step, be careful when providing credentials to any agent or CI: prefer short-lived OIDC tokens or narrowly-scoped secrets, review any pipeline changes before applying them, and never paste long-lived API tokens into chat history or agent-visible places.

Like a lobster shell, security has layers — review code before you run it.

latestvk970cardsv149h3eb6ybkbyz9h83jqc3

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments