Skill Publisher

上传和发布技能到 ClawHub 市场。当用户说"发布skill"、"上传到clawhub"、"发布到市场"或需要将本地技能发布到 ClawHub 时触发。

Security Scan

This is an instruction-only skill that coherently documents how to publish a skill to ClawHub using the 'npx clawhub' CLI; it appears to do what it says, but it implicitly assumes npx/Node are available and will execute remote package code when run.

Purpose & Capability

The SKILL.md's purpose (publish a skill to ClawHub) matches the actions it instructs (npx clawhub whoami/inspect/publish). However the file assumes the presence of npx/Node and the clawhub npm package without declaring required binaries or credentials—this is a minor mismatch but explainable for an instruction-only skill.

Instruction Scope

Instructions are narrowly scoped to running the ClawHub CLI commands (whoami, login, inspect, publish, sync) and manipulating a local skill path (may be under home). It does not instruct reading unrelated system files or exfiltrating data to unexpected endpoints beyond ClawHub.

Install Mechanism

No install spec or code files are present (instruction-only). No downloads or archive extraction are instructed by the skill itself. Risk arises only from invoking 'npx clawhub' at runtime (see guidance).

Credentials

The skill declares no required environment variables or credentials. At runtime the user will be prompted to authenticate with ClawHub via the CLI (npx clawhub login) as expected; no unrelated credentials are requested.

Persistence & Privilege

always is false and the skill doesn't request persistent or elevated system presence. It does not modify other skills' configs or claim broad privileges.

Assessment

This skill is an instructions document for using the ClawHub CLI and appears coherent. Before using it: (1) verify you have Node/npm/npx installed — the SKILL.md assumes npx is available but doesn't declare it; (2) be aware that running 'npx clawhub ...' will fetch and run the clawhub package from the npm registry at runtime — confirm the package name, version and that you trust ClawHub; (3) review the files in the skill-path you intend to publish so you don't accidentally upload sensitive files; (4) prefer running the shown commands manually the first time so you can inspect CLI output and any login flow; and (5) if you require higher assurance, install the clawhub CLI from a verified source (or pin a known-safe version) before invoking these commands.

ClawHub 技能发布

将本地 Skill 上传到 ClawHub 市场。

前置检查

1. 检查登录状态

执行命令检查是否已登录：

cd ~ && npx clawhub whoami

• 如果显示用户名 → 已登录，继续下一步
• 如果未登录 → 执行 npx clawhub login 引导用户登录

2. 检查技能是否存在

查看目标技能是否已发布过：

cd ~ && npx clawhub inspect <slug>

• 如果存在 → 需要发布新版本（版本号 +0.0.1）
• 如果不存在 → 首次发布，使用 v1.0.0

发布流程

首次发布

cd ~ && npx clawhub publish <skill-path> --slug <slug> --name "<显示名称>" --version 1.0.0 --tags "<标签1,标签2>"

更新发布

cd ~ && npx clawhub publish <skill-path> --slug <slug> --version <新版本> --changelog "<更新说明>"

版本号规则：遵循语义化版本 (semver)

• 首次发布：1.0.0
• 小更新（bug修复）：1.0.x
• 新功能：1.x.0
• 重大更新：x.0.0

CLI 命令参考

命令	说明
npx clawhub whoami	查看登录状态
npx clawhub login	登录
npx clawhub inspect <slug>	查看已发布技能信息
npx clawhub publish <path> [options]	发布技能
npx clawhub sync	同步本地技能到市场

publish 选项

--slug <slug>       技能标识符（必填）
--name <name>       显示名称（必填，首次发布）
--version <version> 版本号（必填）
--changelog <text> 更新说明
--tags <tags>       标签，逗号分隔

输出格式

发布成功后，输出：

✅ <技能名> v<版本> 已发布到 ClawHub
🔗 https://clawhub.ai/<用户名>/<slug>

触发词

• "发布skill"
• "上传到clawhub"
• "发布到市场"
• "发布技能"
• "更新skill"
• "sync skills"

注意事项

1. skill 路径可以是绝对路径或 ~/.workbuddy/skills/<skill-name>
2. slug 只能包含小写字母、数字和连字符
3. 版本号必须是有效的 semver 格式
4. 发布前确保 SKILL.md 格式正确