📦 Clawhub
v1.0.0发布 Howto：将技能发布到 ClawHub 的完整流程与故障排查。用于发布、更新、调试 OpenClaw skill 到 ClawHub。涵盖账号准备、认证配置、发布命令及常见错误排查。
0· 44·0 当前·0 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
安全
high confidenceAn instruction-only how-to for publishing skills to ClawHub that is coherent with its stated purpose; it asks users to supply a GitHub token (via GITHUB_TOKEN) but otherwise contains no unexpected requests or installs.
评估建议
This is a straightforward publishing how‑to and is internally consistent. Before using it: (1) Treat GITHUB_TOKEN as a secret — prefer temporary environment variables or a secrets manager over appending tokens to ~/.bashrc; avoid placing tokens in command history. (2) Create a GitHub personal access token with the narrowest scopes needed (least privilege) and revoke it if compromised. (3) Verify the authenticity of the clawhub CLI you install (download from an official source) before running log...详细分析 ▾
✓ 用途与能力
The name/description (ClawHub publish how-to) matches the content: CLI commands, troubleshooting, and GitHub token guidance are appropriate for publishing to ClawHub. No unrelated services or credentials are requested.
ℹ 指令范围
SKILL.md stays on-topic: it lists clawhub login/publish commands, rate-limit diagnostics, and required SKILL.md fields. It does recommend persisting a GITHUB_TOKEN into ~/.bashrc and uses curl/jq in examples (these binaries are not declared in the metadata). Persisting a token in shell rc files and running commands with tokens on the command line have security implications and should be done cautiously.
✓ 安装机制
No install spec and no code files — instruction-only. Nothing will be written to disk by the skill itself. This is the lowest-risk install model.
ℹ 凭证需求
The manifest lists no required env vars but the instructions instruct users to set GITHUB_TOKEN when needed. Asking the user for a GitHub personal access token is proportionate to the publishing task, but the guide's example of storing the token in ~/.bashrc and using it directly on the command line increases the risk of accidental exposure (shell history, backups, shared machines). The guide does not mention using least-privilege scopes for the token or safer storage options.
✓ 持久化与权限
always is false and there is no install step that would persist or elevate the skill. The skill does not request system-wide changes or access to other skills' configurations.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/22
Initial release of clawhub-publish-howto: a complete guide for publishing skills to ClawHub with troubleshooting. - Provides step-by-step publishing instructions, from login to release commands. - Covers authentication via ClawHub token and environment variable for GitHub Token to avoid rate limits. - Documents common error messages and clear troubleshooting steps. - Lists required SKILL.md fields and verification methods post-publish. - Includes practical experience tips to prevent common issues.
● 无害
安装命令
点击复制官方npx clawhub@latest install clawhub-publish-howto
镜像加速npx clawhub@latest install clawhub-publish-howto --registry https://cn.longxiaskill.com镜像同步中