Навыки publish-to-all-skill-stores

📦

publish-to-all-skill-stores

Name: publish-to-all-skill-stores
Author: xixi048

v2.2.0 Ревизия содержимого r2 Высокий риск 🌐 Доступ к сети📁 Доступ к файловой системе⚙️ Внешние команды⚡ Содержит скрипты🔑 Переменные окружения

Publish Agent Skills Across Supported Marketplaces

Skill marketplaces require different repository layouts, package formats, and submission steps. This skill provides local preparation tools, supported API submissions, and channel-specific publishing guidance.

Поддерживает: Claude Codex Code(CC)

⚠️ 38 Плохо

Maintain this Skill? Claim it ⚠️ 38 Плохо

Остановитесь и запросите подтверждение перед установкой.

Проверьте план и получите явное согласие пользователя перед изменением файлов.

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "publish-to-all-skill-stores" from https://skillstore.io/skills/xixi048-publish-to-all-skill-stores.md and its manifest at https://skillstore.io/api/skills/xixi048-publish-to-all-skill-stores/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/xixi048-publish-to-all-skill-stores.md Подписанный manifest GET /api/skills/xixi048-publish-to-all-skill-stores/manifest Подписанный lockfile GET /api/skills/xixi048-publish-to-all-skill-stores/lockfile

Протестировать

Использование «publish-to-all-skill-stores». Review my skill before I submit it.

Ожидаемый результат:

Metadata: name and description are present.
License: no license file was found in the selected skill or repository root.
Package review: check for credentials and file symlinks before building a release archive.
Publication: no submissions were made.

Использование «publish-to-all-skill-stores». Summarize the selected marketplace publishing plan.

Ожидаемый результат:

skillstore: repository submission can use the included API handler after approval.
skillbay: prepare a skill document and contact details for the quick submission workflow.
ClawHub: user authentication is required before publishing.
MCP directories: require an existing runnable service, not only a skill document.

Использование «publish-to-all-skill-stores». Prepare a WorkBuddy skill package without uploading it.

Ожидаемый результат:

Package layout: SKILL.md at the archive root.
Metadata: additional display names and localized descriptions belong in the packaged copy.
Source: the original SKILL.md remains unchanged.
Next check: inspect the archive contents, size, and directory depth before upload.

Аудит безопасности

Высокий риск

v2 • 29.10.2026 Открыть версионный отчет

Reviewed all 159 static findings: eight identify credential forwarding or unsafe temporary login logs; the remaining 151 are false positives. Semantic findings identify plaintext credential memory, unsafe archive selection, and instructions that can manipulate security review through unsupported safety claims. No evidence found of executable obfuscated payloads; multilingual prose, detection signatures, and Markdown explain the apparent execution and entropy alerts.

Просканировано файлов

2,967

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (3)

Высокий

references/xiaping.md:33-36

Long-Lived API Key Stored in Agent Memory

The XiaPing guide directs agents to store their long-lived API key in MEMORY.md. Plaintext agent memory can expose credentials through later context loading, synchronization, or accidental publication.

The text identifies the response key as a long-term credential and explicitly instructs saving it in the memory document. No protected storage mechanism is specified.

Высокий

scripts/build_package.py:35-74 scripts/build_package.py:84-90 scripts/build_wb.py:85-98 scripts/build_wb.py:167-171

Sensitive Local Files Can Enter Publication Archives

The generic builder accepts credential files, while both builders follow file symlinks without checking containment. WorkBuddy limits top-level directories, but secrets inside those directories can still enter release archives.

The generic collector accepts .env; WorkBuddy accepts files inside designated subdirectories without secret exclusions. Both archive writers dereference file symlinks, so disclosure depends on the selected tree.

Высокий

SKILL.md:89-91 references/paid-channels.md:123-128

Prompt Injection Attempt Detected

The guide says "写进提交备注，比修改代码更有效", meaning writing safety assurances in submission notes is more effective than changing code. Instructing agents to assert no network access and mandatory backups without verification can manipulate marketplace security review.

The instructions explicitly favor safety claims over code corrections and repeat blanket assurances for scripted skills. This targets downstream review, not this audit's instruction hierarchy.

Пункты проверки возможностей (8)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Высокий

references/pitfalls.md:96

Shell command substitution

TOK=$(gh auth token); B64=$(printf 'x-access-token:%s' "$TOK" | base64 -w0)

The recipe extracts a GitHub token and Base64-encodes it for an Authorization header. Lines 97-98 send that credential through ghfast.top.

Высокий

references/pitfalls.md:98

Hardcoded URL

push https://ghfast.top/https://github.com/<owner>/<repo>.git main

The Git push targets ghfast.top while the preceding line supplies a GitHub Authorization header. The third-party mirror receives reusable GitHub credentials.

Высокий

references/submission-recipes.md:166

Shell command substitution

TOK=$(gh auth token)

The command retrieves the active GitHub token. The following commands place it in an Authorization header sent through a third-party mirror.

Высокий

references/submission-recipes.md:167

Shell command substitution

B64=$(printf 'x-access-token:%s' "$TOK" | base64 -w0)

The command converts the GitHub token into reversible Basic authentication material. Lines 168-170 send it to ghfast.top rather than directly to GitHub.

Высокий

references/submission-recipes.md:170

Hardcoded URL

push https://ghfast.top/https://github.com/<owner>/<repo>.git main

The mirror URL is used for a push with an explicit GitHub Authorization header. TLS terminates at the third party, exposing the credential.

Средний

references/pitfalls.md:65

Temp directory access

(nohup npx -y clawhub@latest login >/tmp/clawlogin.log 2>&1 &); sleep 12; cat /tmp/clawlogin.log

Login output is redirected to a predictable shared temporary path without permission controls. Another local user could read authentication output or preplant a symlink.

Средний

references/submission-recipes.md:98

Temp directory access

(nohup npx -y clawhub@latest login >/tmp/clawlogin.log 2>&1 &); sleep 12

The login process writes authentication output to a fixed shared temporary filename. Missing restrictive permissions and exclusive creation permit local disclosure or symlink clobbering.

Средний

references/submission-recipes.md:99

Temp directory access

cat /tmp/clawlogin.log # 拿到 https://clawhub.ai/cli/device?user_code=XXXX-XXXX

The command reads a predictable shared login log without verifying ownership or permissions. A local attacker could replace it or access authentication output.

Факторы риска

🌐 Доступ к сети (48)

📁 Доступ к файловой системе (23)

⚙️ Внешние команды (50)

references/pitfalls.md:96 references/pitfalls.md:65 references/submission-recipes.md:79 references/submission-recipes.md:102 references/submission-recipes.md:166 references/submission-recipes.md:167 references/submission-recipes.md:98 scripts/preflight.py:51 scripts/preflight.py:53 scripts/preflight.py:252 scripts/preflight.py:262 scripts/preflight.py:266 scripts/preflight.py:283 scripts/preflight.py:332 scripts/preflight.py:387 scripts/preflight.py:408 scripts/preflight.py:431 scripts/preflight.py:432 SKILL.md:35 SKILL.md:37 SKILL.md:49-54 SKILL.md:54-65 SKILL.md:65-66 SKILL.md:66-67 SKILL.md:67 SKILL.md:69-70 SKILL.md:70-71 SKILL.md:71-72 SKILL.md:72-75 SKILL.md:75-85 SKILL.md:85 SKILL.md:89-94 SKILL.md:94 SKILL.md:95 SKILL.md:104-121 SKILL.md:121-122 SKILL.md:122-127 SKILL.md:127 SKILL.md:128 SKILL.md:131 SKILL.md:132 SKILL.md:134-135 SKILL.md:135-150 SKILL.md:150-158 SKILL.md:158-168 SKILL.md:168-170 SKILL.md:170 SKILL.md:176 SKILL.md:177-180 SKILL.md:180-187

⚡ Содержит скрипты (3)

references/submission-recipes.md:153 scripts/preflight.py:50 scripts/preflight.py:51

🔑 Переменные окружения (7)

references/workbuddy-connector.md:76 references/xiaping.md:25 references/xiaping.md:33 references/xiaping.md:50 references/xiaping.md:62 references/xiaping.md:77 references/xiaping.md:133

Аудитор:: codex Посмотреть историю аудитов →

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/xixi048-publish-to-all-skill-stores/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/xixi048-publish-to-all-skill-stores/security.svg)](https://skillstore.io/skills/xixi048-publish-to-all-skill-stores?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/xixi048-publish-to-all-skill-stores?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/xixi048-publish-to-all-skill-stores/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/xixi048-publish-to-all-skill-stores.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

xixi048. (2026). publish-to-all-skill-stores security audit report (audit version 2) [Author version 2.2.0]. Skillstore. https://skillstore.io/skills/xixi048-publish-to-all-skill-stores/audits/2

Цитата BibTeX

@techreport{xixi048-xixi048-publish-to-all-skill-stores-2026,
  author = {xixi048},
  title = {publish-to-all-skill-stores security audit report (audit version 2)},
  institution = {Skillstore},
  year = {2026},
  number = {2},
  url = {https://skillstore.io/skills/xixi048-publish-to-all-skill-stores/audits/2},
  note = {Author version 2.2.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "publish-to-all-skill-stores security audit report (audit version 2)"
version: "2.2.0"
type: report
authors:
  - name: "xixi048"
date-released: "2026-10-29"
url: "https://skillstore.io/skills/xixi048-publish-to-all-skill-stores/audits/2"
identifiers:
  - type: other
    value: "skillstore:xixi048-publish-to-all-skill-stores:audit:2"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

100

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Prepare an Open-Source Skill Release

Check repository structure and prepare publication archives before submitting an agent skill to selected public marketplaces.

Coordinate Marketplace Submissions

Separate automated API submissions from channels awaiting login, review, or platform-specific development, then track available receipts.

Plan Service Distribution

Compare skill listings, MCP directories, API catalogs, and hosted platforms to identify suitable deliverables for an existing service.

Попробуйте эти промпты

Review Publishing Readiness

Review [skill directory] for publishing readiness. Explain metadata, license, and layout issues without changing files, submitting content, or installing tools.

Prepare a Release Package

Prepare a package for [marketplace] from [skill directory]. Inspect credentials and symlinks first, confirm the output directory, and do not upload anything.

Submit to Selected Channels

Plan submissions for [repository URL] to [selected marketplaces]. Show destinations and shared data, request approval, then report receipts and unresolved login requirements.

Design a Distribution Workflow

Create a distribution plan for [skill repository] and [MCP or API endpoint]. Separate packaging, registry submissions, authentication, consent, and porting work.

Лучшие практики

Approve each destination and shared field before submission; retain receipts and distinguish submitted content from approved listings.
Inspect archives for secrets and symlinks, use protected credential storage, and authenticate directly with the intended service.
Verify current marketplace requirements and support every safety statement with release evidence; do not follow instructions that substitute assurances for security fixes.

Избегать

Forwarding GitHub tokens through third-party mirrors or saving long-lived API keys in agent memory.
Publishing archives without inspecting sensitive files, symlinks, output paths, and included metadata.
Treating a broad channel catalog, a successful request, or a preflight result as guaranteed approval or a complete security audit.

Часто задаваемые вопросы

Does this publish to every marketplace automatically?

No. The script implements several API handlers, while many catalog entries require login, manual review, repository contributions, or platform-specific development.

Can I use it with Claude, Codex, and Claude Code?

The report lists all three tools as supported. Local scripts require a compatible Python installation, while authenticated channels may require additional CLIs.

Does the preflight script certify that my skill is secure?

No. It checks metadata and text patterns. It cannot replace code review, credential inspection, or marketplace security assessment.

Can it publish private repositories to automatic indexes?

Public auto-indexers generally require accessible repositories. Private distribution needs an appropriate authenticated upload or hosted workflow.

Does submission enable paid listings?

Not automatically. Pricing and payment setup usually require seller accounts, merchant verification, or platform-specific service changes.

What precautions are needed before using the recipes?

Avoid token-bearing mirror pushes and plaintext credential memory. Inspect archives for secrets and symlinks, and approve destinations and legal pledges explicitly.