skill-releaserRelease skills to ClawhHub through the full publication pipeline — auto-scaffolding, OPSEC scan, dual review (agent + user), force-push release, security sca...
Install via ClawdBot CLI:
clawdbot install chunhualiao/skill-releaserGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Potentially destructive shell commands in tool definitions
rm -rf /Calls external URL not in known-safe list
https://github.com/your-org/openclaw-skill-{name}.gitAI Analysis
The skill definition includes unsafe shell commands (rm -rf /) and references external GitHub URLs that could be manipulated to point to malicious repositories. While the overall release pipeline appears legitimate, these specific patterns introduce risk of destructive actions or unauthorized code execution if variables are not properly sanitized.
Audited Apr 17, 2026 · audit v1.0
Generated Mar 21, 2026
A startup building a platform for AI agents uses Skill Releaser to automate the publication of new skills from developers to their marketplace. It ensures each skill is properly structured, scanned for security, and reviewed before public release, streamlining the onboarding of third-party contributors.
A large corporation adopts Skill Releaser to manage internal AI skill deployments across teams. It automates the release pipeline for custom-built skills, enforcing OPSEC checks and dual reviews to maintain security and compliance before rolling out tools to employees.
An open-source community uses Skill Releaser to handle contributions to their AI agent skill repository. It scaffolds missing files, runs automated scans, and coordinates batch reviews, allowing maintainers to efficiently process multiple pull requests without manual oversight.
A university integrates Skill Releaser into their AI curriculum to help students publish skills as part of coursework. It guides learners through the full release process, from scaffolding to approval, teaching best practices in software deployment and collaboration.
A freelance developer uses Skill Releaser to quickly publish and update skills for clients on ClawhHub. It automates the tedious steps of repo management and review coordination, allowing them to focus on skill content while ensuring reliable releases.
Offer Skill Releaser as a cloud-based service with tiered pricing based on the number of skills released per month. Include features like advanced analytics, priority support, and custom integration options to attract teams and enterprises.
Provide consulting services to help organizations integrate Skill Releaser into their existing AI workflows. Offer customization for specific security requirements, batch processing needs, or integration with proprietary tools.
Integrate Skill Releaser into an AI skill marketplace, taking a commission on each skill sold or downloaded. Use the tool to ensure high-quality, secure listings, attracting more developers and users to the platform.
💬 Integration Tip
Ensure the host machine has proper CLI tools (gh, clawhub) installed and authenticated, and set up automated monitoring for batch processes to handle failures silently without user interruption.
Scored Apr 19, 2026
Use the @steipete/oracle CLI to bundle a prompt plus the right files and get a second-model review (API or browser) for debugging, refactors, design checks, or cross-validation.
This skill should be used when the user needs to analyze frontend project architecture evaluate tech stack choices review component design patterns assess bu...
Write, run, and manage unit, integration, and E2E tests across TypeScript, Python, and Swift using recommended frameworks.
Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.
Control desktop applications on Windows — launch, close, focus, resize, move windows, simulate keyboard/mouse input, manage processes, control VSCode, read clipboard, and capture screen info. Use when the user wants to interact with any running program, switch windows, type text, press shortcuts, open files in VSCode, manage running processes, or get system display information.
A comprehensive skill for using the Cursor CLI agent for various software engineering tasks (updated for 2026 features, includes tmux automation guide).