Audit-first pipeline to publish an OpenClaw skill to ClawHub without leaking personal data, credentials, or model-specific references. Five stages — Sanitize, Transform, Verify, Publish, Install-check — with explicit user approval before every irreversible step. Use this when the user wants to publish a skill to ClawHub, sanitize a skill before publishing, run a pre-publish PII/secret audit, or follow the ClawHub publish workflow. Trigger phrases: 'publish to ClawHub', 'publish my skill', 'sanitize before publish'…
These states come from the source or distribution context. None of the entries below are SkillVetAI compatibility test results.
These checks parse the fixed package against dated platform rules. They do not execute the Skill or verify task behavior.
.claude/skills/Skill Audit & PublishSKILL.mdRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
.agents/skills/Skill Audit & PublishSKILL.mdRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
skills/Skill Audit & PublishSKILL.mdRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
This command is recorded from the source ecosystem and resolves the registry's latest release. The fixed release shown on this page should be inspected before adoption.
clawhub install @haiyangchenbj/skill-audit-publishclawhub inspect @haiyangchenbj/skill-audit-publish --version 1.4.0This automated, non-executing scan is bound to this release hash. It is not a safety certification and may contain false positives or false negatives.
This is registry-supplied evidence for the recorded release, not an independent SkillVetAI scan. Check the canonical source for the full report, scanner versions, scope, and current moderation state.
The catalog stores hashes and an inventory summary for change detection. It does not republish the package contents.
sha256:d48d2810891b350cc8c962eb6d7858d43a17495440fd7a09a5132f3bd72f139fsanitize.mdskill-card.mdSKILL.mdtransform.mdverify.mdAdd Release Type Gate: new-skill vs content-update vs patch pipeline strictness; mandatory slug-collision pre-check and structure completeness for new skills; frozen-skill list (social-persona-profiling)
Both fixed releases were scanned under the current scanner and policy, so finding, permission and dependency changes are available.
These older immutable releases were observed by prior successful syncs. They remain recorded when a newer release becomes current.
sha256:41212ad2097a2b64dbeb6162f68076e15127288888f065ce2b0c50c88394a7bbsha256:1332814ac5cf67ea459dfe89b9ca613ebf9714a959a7c02e28f7ccbf6c4d38e3