📦 ClawHub Release Manager — 版本发布管理
v0.1.0在 ClawHub 上按版本规范安全发布技能更新：自动 bump 版本号、执行 lint/build 检查、生成变更日志并一键发布，适用于补丁与次版本发布。
0· 77·0 当前·0 累计
by 下载技能包
最后更新
2026/4/3
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears to implement a reasonable ClawHub release workflow, but there are a few issues to check before installing:
- Tooling: The runtime expects the 'clawhub' CLI and 'bun' (for lint/build). The skill metadata does not declare required binaries. Ensure those tools are installed and available on PATH before using the skill.
- Credentials: Publishing requires ClawHub authentication (the SKILL.md checks 'clawhub whoami'). The skill doesn't declare which credentials it will use; confirm...详细分析 ▾
⚠ 用途与能力
The SKILL.md explicitly requires running the 'clawhub' CLI and running project checks via 'bun' (bun run lint/build). However, the skill metadata lists no required binaries, no required env vars, and no primary credential. A release manager that runs 'clawhub publish' normally requires the ClawHub CLI and authenticated credentials; those should be declared. The absence of a declared source/homepage (source: unknown) reduces transparency.
ℹ 指令范围
The instructions stay on-topic: they describe checking authentication, bumping versions, running lint/build, publishing, and returning the release id using a provided output template. They instruct the agent to operate on the local working directory and modify version files and changelogs — expected for a release tool, but this implies the agent will edit repository files and invoke CLI tooling with whatever credentials/config are available in the environment.
✓ 安装机制
This is an instruction-only skill with no install spec or code files, which minimizes install-time risk (nothing is downloaded or written by an installer).
ℹ 凭证需求
No environment variables or credentials are declared, but the runtime steps depend on an authenticated 'clawhub' environment (clawhub whoami / clawhub publish). That implies reliance on existing local credentials/config; the skill should declare this dependence so users understand what secrets will be used. No unrelated credentials or unusual environment access are requested.
✓ 持久化与权限
The skill is not always-enabled and is user-invocable; it does not request to modify other skills or system-wide agent settings. The default ability for the model to invoke the skill autonomously remains, but that is normal and not by itself flagged.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/4/3
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install clawhub-release-manager
镜像加速npx clawhub@latest install clawhub-release-manager --registry https://cn.longxiaskill.com