Навыки skill-publisher-cli
📦

skill-publisher-cli

v1.2 Ревизия содержимого r1 Безопасно ⚙️ Внешние команды🌐 Доступ к сети

Plan SKILL.md Releases and Distribution Packages

Preparing skill releases requires consistent metadata, version history, and clean package contents. This documentation guide outlines a reviewable workflow, but does not include executable publishing tools.

Поддерживает: Claude Codex Code(CC)
Maintain this Skill? Claim it 🥉 77 Бронза

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента
Review the Skillstore skill "skill-publisher-cli" from https://skillstore.io/skills/nexaiguy-skill-publisher-cli.md and its manifest at https://skillstore.io/api/skills/nexaiguy-skill-publisher-cli/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/nexaiguy-skill-publisher-cli.md Подписанный manifest GET /api/skills/nexaiguy-skill-publisher-cli/manifest Подписанный lockfile GET /api/skills/nexaiguy-skill-publisher-cli/lockfile

Протестировать

Использование «skill-publisher-cli». What can I use directly from this public package?

Ожидаемый результат:

  • Available: a guide covering validation, versioning, packaging, and metadata preparation.
  • Not included: helper scripts, extension source, templates, or a runnable CLI.
  • Use the guide for planning; obtain and review separate tools before expecting automation.

Использование «skill-publisher-cli». Plan a patch release from 0.1.0 for a regex fix without changing files.

Ожидаемый результат:

  • Proposed version: 0.1.1.
  • Proposed changelog entry: Fixed regex for edge-case parsing.
  • Package plan: exclude Git metadata and Python cache folders.
  • Status: proposal only; no validation executed or archive created.
  • Approval is required before applying changes.

Аудит безопасности

Безопасно
v1 • 02.11.2026 Открыть версионный отчет

All four static findings are false positives: inline Markdown formatting, attribution links, and a catalog URL contain no executable commands or reconnaissance. No evidence found of prompt injection, credential access, or data exfiltration in SKILL.md. The package contains only documentation, so its advertised automation cannot be verified.

1
Просканировано файлов
94
Проанализировано строк
0
Пункты проверки
0
Ложные срабатывания проигнорированы

Факторы риска

⚙️ Внешние команды (1)
SKILL.md:31
🌐 Доступ к сети (2)
SKILL.md:14 SKILL.md:93
Последний завершенный статический и семантический аудит не обнаружил подтвержденных проблем безопасности. Это не доказывает отсутствие побочных эффектов у навыка.
Аудитор:: codex
Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет
Оценка безопасности

Копировать ссылку на отчёт

https://skillstore.io/skills/nexaiguy-skill-publisher-cli/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/nexaiguy-skill-publisher-cli/security.svg)](https://skillstore.io/skills/nexaiguy-skill-publisher-cli?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/nexaiguy-skill-publisher-cli?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/nexaiguy-skill-publisher-cli/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/nexaiguy-skill-publisher-cli.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Академические ссылки (APA · BibTeX · CFF)

Цитата APA

nexaiguy. (2026). skill-publisher-cli security audit report (audit version 1) [Author version 1.2]. Skillstore. https://skillstore.io/skills/nexaiguy-skill-publisher-cli/audits/1

Цитата BibTeX

@techreport{nexaiguy-nexaiguy-skill-publisher-cli-2026, author = {nexaiguy}, title = {skill-publisher-cli security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/nexaiguy-skill-publisher-cli/audits/1}, note = {Author version 1.2} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "skill-publisher-cli security audit report (audit version 1)" version: "1.2" type: report authors: - name: "nexaiguy" date-released: "2026-11-02" url: "https://skillstore.io/skills/nexaiguy-skill-publisher-cli/audits/1" identifiers: - type: other value: "skillstore:nexaiguy-skill-publisher-cli:audit:1" description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний
55
Архитектура
85
Сопровождаемость
87
Контент
65
Сообщество
83
Соответствие спецификации

Что вы можете построить

Prepare a first skill release

Create a release checklist covering frontmatter, naming, internal links, and package exclusions before preparing a marketplace submission.

Coordinate a maintenance update

Plan a patch version change and changelog entry with an approval checkpoint before modifying release files.

Standardize release requirements

Use the documented workflow as requirements for separately implemented validation and packaging tools across a team.

Попробуйте эти промпты

Understand the release checklist 
Summarize the documented checks for a first SKILL.md release. Identify which steps require tools missing from this package.
Review supplied skill files 
Review my supplied SKILL.md and directory listing for frontmatter, naming, internal links, and packaging exclusions. Report missing evidence without changing files.
Draft a patch release 
Using my supplied metadata, plan a patch release for a regex fix. Draft the changelog and package checklist; request approval before edits.
Design a reproducible release workflow 
Design a dry-run-first workflow for our SKILL.md repository. Separate documented requirements from missing tooling, and specify approval gates, validation checks, and packaging exclusions.

Лучшие практики

  • Confirm which executable tools are available before requesting automated release actions.
  • Review proposed version changes, changelog entries, and package contents before approving writes.
  • Check current destination registry requirements independently before submitting a release.

Избегать

  • Assuming the public guide includes the advertised scripts or CLI binary.
  • Treating an illustrative dry-run result as proof that validation or packaging actually occurred.
  • Publishing an archive without reviewing excluded files, metadata, and the intended version.

Часто задаваемые вопросы

Does this package include a working CLI?
No. The public folder contains only SKILL.md and explicitly excludes scripts, extension source, and templates.
Can I use this guide with Claude, Codex, or Claude Code?
Yes, it provides SKILL.md guidance for compatible agents. Actual automation requires separately available tools.
What validation checks does the guide describe?
It describes YAML frontmatter checks, naming conventions, and broken internal links. No executable validator is included.
Does it upload releases to marketplaces?
No. The documented workflow prepares local distribution materials and leaves uploads outside its stated scope.
How should version changes be handled?
The guide describes semantic version bumps with changelog updates. Review a proposed change before approving any file modifications.
Is Python required to read the guide?
No. Python 3.x is listed for the described helper scripts, which are not included in this public package.

Сведения для разработчиков

Автор

nexaiguy

Лицензия

MIT

Версия автора

v1.2

Ревизия Skillstore

r1

Примечание о версии

Заявленная автором версия не соответствует SemVer.

Репозиторий

https://github.com/nexaiguy/nex-ai-skills/tree/463aaff26593654193deb52f24d18e80ec21e323/skills/skill-publisher-cli

Ссылка

3ddfdca559084abffbfdd188f2ba14b597dcfd9c

Актуальность поддержки

02.11.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📄 SKILL.md