ClawHub Publish Doctor — 技能工具
v1.0.0[自动翻译] Diagnose and mitigate ClawHub/ClawDHUB publish failures (auth, browser-login, missing dependencies, pending security-scan visibility errors, and wrong...
0· 580·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidenceThe skill's files and instructions match its stated purpose (diagnosing and stabilizing ClawHub publishes); it requires the official clawhub CLI and only performs local checks, publishes, and retrying inspects with no unexplained network endpoints or secret exfiltration.
评估建议
This package appears coherent and limited to helping with ClawHub publishes. Before running: (1) verify you have the official clawhub CLI installed (avoid unknown binaries), (2) keep your ClawHub token secret and use token login only in trusted environments, (3) review the small shell scripts yourself — they write temporary diagnostic files to /tmp and call clawhub commands but do not exfiltrate secrets, and (4) avoid running as an elevated user in shared systems. If you need higher assurance, t...详细分析 ▾
✓ 用途与能力
Name/description describe publish diagnostics; included scripts perform preflight checks (presence of clawhub/xdg-open/rg), instruct token-based login, run clawhub publish and clawhub inspect with retry — all coherent with the stated goal.
ℹ 指令范围
SKILL.md limits runtime actions to running the provided scripts and the clawhub CLI. The scripts write small diagnostic outputs to /tmp (whoami/publish outputs) and echo CLI results; this is within scope but worth noting if you run in a shared or highly-sensitive environment since temporary files are used.
✓ 安装机制
This is an instruction-only skill with two small shell scripts; there is no install spec, no downloads, and no archive extraction. No high-risk install behavior observed.
✓ 凭证需求
No required environment variables or credentials are declared. The workflow expects the user to supply a ClawHub token for `clawhub login --token <clh_token>` which is appropriate and proportional for publishing operations. Optional controls (MAX_RETRIES, SLEEP_SECONDS) are benign.
✓ 持久化与权限
The skill does not request permanent/forced inclusion (always:false), does not modify other skills or global agent settings, and has no autonomous persistence behavior beyond normal invocation.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/16
Initial public release
● 可疑
安装命令 点击复制
官方npx clawhub@latest install clawhub-publish-doctor
镜像加速npx clawhub@latest install clawhub-publish-doctor --registry https://cn.clawhub-mirror.com
技能文档
Stabilize ClawHub publishing with preflight checks, safer publish commands, and post-publish verification that tolerates temporary registry states.
Quick workflow
- Run preflight checks:
scripts/clawhub_preflight.sh
- If login/browser issues appear, follow
references/error-map.md. - Publish with retry-aware verification:
scripts/clawhub_publish_safe.sh [changelog]
- If inspect still fails, classify the error with
references/error-map.mdbefore escalating.
Standard commands
Preflight
bash scripts/clawhub_preflight.sh
Login (token-based, headless-safe)
clawhub login --token
clawhub whoami
Safe publish
bash scripts/clawhub_publish_safe.sh ./my-skill my-skill "My Skill" 1.0.0 "Initial release"
Manual inspect
clawhub inspect my-skill --json
Rules
- Prefer token login in server/headless environments.
- Treat
inspecterrors right after publish as potentially transient for a few minutes. - Verify with both CLI (
clawhub inspect) and web URL (/skills/). - Use canonical URLs:
https://clawhub.ai/skills/
- Owner/slug: https://clawhub.ai//
- User profile (if available): https://clawhub.ai/users/Resources
references/error-map.md: quick diagnosis for common failure signatures.scripts/clawhub_preflight.sh: dependency + environment checks.scripts/clawhub_publish_safe.sh: publish + retry verification wrapper.
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制