Publisher
PassAudited by ClawScan on May 10, 2026.
Overview
This is a coherent publishing helper, but it can create a public GitHub repository and publish everything in the selected skill directory, so users should review contents before approving.
Install only if you intend to publish a skill. Run it from the exact skill directory you want to publish, review files first, confirm the active GitHub account, and do not approve publishing if the directory contains secrets, drafts, or private material.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Approving publication could make all files in the current skill directory public or distributed through ClawdHub.
The script can commit and publish all files in the selected skill directory to a public GitHub repo and ClawdHub. This is aligned with the publishing purpose and follows a yes/no prompt, but it is high-impact if the directory contains unintended private files.
git add . ... gh repo create "$SKILL_NAME" --public --source=. --remote=origin --push ... clawdhub publish . --version "$VERSION"
Before approving, inspect the directory, remove secrets/private files, and use a .gitignore as needed.
The command will operate as the GitHub account currently authenticated in gh.
The skill relies on GitHub CLI authentication with repository privileges, which is expected for creating and pushing repositories but gives the script authority over the user’s GitHub account within that scope.
gh auth login ... gh auth refresh -s repo
Confirm the active GitHub account and granted scopes before publishing; use the minimum GitHub permissions needed.
The skill may fail or prompt manual setup if the needed tools are not installed.
The registry metadata does not declare required tools, while the provided documentation and script require jq, gh, clawdhub, git, and bash. This may prevent platform-level preflight checks, though the requirements are disclosed in the artifacts.
Required binaries (all must exist): none; Install specifications: No install spec
Install dependencies from trusted sources and verify gh/clawdhub before running the publisher.