A comprehensive toolkit and checklist for auditing, securing, and documenting AI agent skills before public release.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install skill-publisher-claw-skill
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install skill-publisher-claw-skill using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Skill Publisher?
The Skill Publisher is an essential framework for developers looking to share their work within the ecosystem of Openclaw Skills. It provides a standardized approach to preparing skills for platforms like GitHub or ClawdHub, focusing on security, portability, and professional documentation. By following this protocol, developers can ensure their skills are reusable, safe for public consumption, and free from sensitive data.
This skill acts as a quality gate, offering both manual checklists and automated scripts to validate file structures and code quality. It addresses the critical needs of the community by enforcing best practices in git hygiene, metadata management, and environment-agnostic configuration, making it easier for others to discover and deploy your Openclaw Skills.
Skill Publisher Use Cases
- Auditing a local skill before pushing it to a public GitHub repository.
- Preparing a skill for submission to centralized hubs like ClawdHub.
- Performing routine security audits on existing Openclaw Skills to prevent secret leaks.
- Validating third-party skills for portability and quality before integration.
- Standardizing documentation across a multi-agent development team.
How Skill Publisher Works
- Structure Validation: Ensures the mandatory SKILL.md and README.md files are present and correctly formatted.
- Security Audit: Scans the codebase for hardcoded API keys, tokens, PII, and sensitive company data using regex patterns.
- Portability Check: Identifies and fixes absolute file paths, ensuring the skill works across different operating systems and user environments.
- Quality Review: Removes debug artifacts, TODOs, and formatting inconsistencies while verifying that all code blocks have proper language tags.
- Documentation Verification: Checks for clear triggers, usage examples, and license information to ensure human and agent readability.
- Testing: Validates the skill through fresh load tests and trigger verification to confirm it performs as expected in a clean session.
- Git Hygiene: Finalizes the package with clean commit histories and a robust .gitignore file.
Skill Publisher Setup
To use the Skill Publisher to manage your Openclaw Skills, you can integrate the automated audit script into your development workflow. Save the audit script as audit.sh and run it from your skill directory:
# Make the script executable
chmod +x audit.sh
# Run the audit on your current directory
./audit.sh .
Skill Publisher Data Schema & Taxonomy
The Skill Publisher expects a specific organizational structure to ensure compatibility across Openclaw Skills environments:
| File | Role | Mandatory |
|---|---|---|
SKILL.md |
Primary entry point containing triggers and quick reference | Yes |
README.md |
Human-centric documentation and project overview | Yes |
LICENSE |
Legal usage terms (MIT recommended) | Yes |
.gitignore |
Prevents OS-specific or temporary files from being tracked | Yes |
test.sh |
Optional script for functional verification | No |
Skill Publisher Advanced Features
- Automated regex-based secret scanning for common API key prefixes (sk-, xai-, ghp_).
- History-rewriting protocols to purge sensitive data from Git commit history.
- Standardized YAML frontmatter templates for enhanced metadata discoverability.
- Platform-agnostic path recommendations to ensure cross-OS compatibility for Openclaw Skills.
- Automated audit script for rapid continuous integration checks.
SKILL.md
Loading
Related Openclaw Skills
GenLayer Knowledge Skill
A technical knowledge repository for understanding GenLayer, the first AI-native blockchain enabling trustless decision-making through LLM consensus.
GenLayer Intelligent Contracts
Build Python smart contracts that leverage LLMs and web data with blockchain consensus.
ClawSkillShield
A local-first security scanner providing static analysis and threat detection for Openclaw Skills to prevent malware and credential leaks.
Intel AI Search (x402)
Intel is an AI-powered search tool that uses x402 micropayments on the Base network to provide real-time, cited web information directly to your coding agent.
telebiz-mcp
A specialized Model Context Protocol server that enables AI agents to interact with Telegram via a secure browser-based executor.
VPN Rotate Skill
Automatically rotate VPN servers to bypass API rate limits and access geo-blocked content during high-volume data operations.
METADATA
Featured*
