Skills skill-market-publisher

📦

skill-market-publisher

Name: skill-market-publisher
Author: zjsxply

Low Risk ⚙️ External commands🌐 Network access

Publish AI Skills to Multiple Marketplaces

This skill automates the complex process of publishing AI skills to multiple marketplace directories. It handles metadata preparation, cross-market submissions, and verification workflows across platforms like AgentSkill.sh, ClawHub, and Skillz Directory.

Supports: Claude Codex Code(CC)

🥈 78 Silver

Download the skill ZIP

Upload in Claude

Go to Settings → Capabilities → Skills → Upload skill

Toggle on and start using

Test it

Using "skill-market-publisher". Publish my skill to AgentSkill.sh with repo URL https://github.com/example/my-skill

Expected outcome:

Successfully submitted to AgentSkill.sh. Submission ID: abc123. Verification URL: https://agentskill.sh/@example/my-skill. The marketplace will import all SKILL.md files from your repository within 5-10 minutes.

Using "skill-market-publisher". Create a publication plan for my skill targeting ClawHub, Skillz Directory, and AgentSkill.sh

Expected outcome:

Generated publication plan for 3 marketplaces. ClawHub: auto-cli mode available, requires version. Skillz Directory: auto-http mode, requires category selection. AgentSkill.sh: auto-http mode, repo-based import. All markets verified and operational. Run 'publish' command for each target to execute submissions.

Security Audit

Low Risk

v1 • 4/21/2026

Static analysis detected 594 pattern matches across documentation and code. After manual evaluation, all flagged items are false positives: external command patterns are either documentation code examples in markdown files or legitimate subprocess calls with hardcoded arguments for git operations and CLI tools. Network URLs are all verified marketplace endpoints. MD5 usage is for content fingerprinting, not security. No evidence of malicious intent, credential exfiltration, or user-controlled code execution.

Files scanned

2,549

Lines analyzed

findings

Total audits

Low Risk Issues (4)

Documentation Code Examples Flagged as Execution

Static analysis detected backtick patterns in markdown documentation files (market-matrix.md, publish-playbook.md, recon-playbook.md, verification-playbook.md, SKILL.md). These are documentation code examples showing CLI commands for users, not actual executable code. No security risk.

scripts/skill_market_publish.py:543-550 scripts/skill_market_publish.py:1231-1237

Legitimate Subprocess Usage for Git Operations

Python script uses subprocess.run for git rev-parse and external CLI tools (clawhub). All commands use hardcoded arguments with no user input injection. Commands are: ['git', 'rev-parse', '--show-toplevel'] and dynamic clawhub CLI commands built from validated input.

scripts/skill_market_publish.py:59

MD5 Used for Content Fingerprinting

MD5 hash algorithm detected in multiple locations. This is used for content deduplication and fingerprinting, not for cryptographic security. Appropriate use case for MD5.

scripts/skill_market_publish.py:57-100

Hardcoded Marketplace Endpoint URLs

Static analysis flagged 206 hardcoded URLs. These are all legitimate, documented marketplace API endpoints and documentation URLs for skill publishing platforms (AgentSkill.sh, ClawHub, Skillz Directory, etc.). No suspicious domains detected.

Risk Factors

⚙️ External commands (2)

scripts/skill_market_publish.py:543-550 scripts/skill_market_publish.py:1231-1237

🌐 Network access (2)

scripts/skill_market_publish.py:91-93 scripts/skill_market_publish.py:74-75

Audited by: claude

Quality Score

Architecture

100

Maintainability

Content

Community

Security

Spec Compliance

What You Can Build

Skill Developer Publishing to Multiple Markets

A developer creates a new AI skill and wants to list it across AgentSkill.sh, Skillz Directory, and ClawHub without manually visiting each marketplace.

Team Managing Multiple Skill Repositories

A team maintains a repository with multiple skills and needs to publish or update listings across different marketplaces with consistent metadata.

Marketplace Integration Testing

A user wants to verify their skill meets all submission requirements before attempting live publication to avoid rejections.

Try These Prompts

Quick Publish to Single Market

Publish my current skill to AgentSkill.sh. The repository URL is https://github.com/owner/repo and the git ref is main.

Multi-Market Deployment Plan

Create a publication plan for my skill at /path/to/skill. Target markets: AgentSkill.sh, Skillz Directory, and ClawHub. Repository: https://github.com/owner/repo, branch: main. Tags: automation, productivity.

Market Reconnaissance

Scan all configured marketplace endpoints to verify current submission paths and API availability. Report any blocked or changed endpoints.

Generate Manual Submission Bundle

Generate a complete submission bundle for my skill at /path/to/skill. Include all market-specific metadata formatted for AgentSkill.sh and Skillz Directory manual submission forms.

Best Practices

Always run the recon command before publishing to verify marketplace submission paths are still operational
Test publication workflows with a test repository or skill before using with production content
Keep marketplace-specific credentials secure using environment variables or secure credential managers
Generate and review submission bundles before executing live publications to catch metadata errors early

Avoid

Publishing the same skill to multiple markets without verifying each marketplace supports the skill's format and requirements
Submitting skills with incomplete or placeholder metadata, which leads to marketplace rejections and poor discoverability
Running bulk publication commands without the --execute flag first to preview the changes
Assuming marketplace submission paths remain static - always recon before publishing after updates

Frequently Asked Questions

Which marketplaces does this skill support?

This skill supports AgentSkill.sh, ClawHub, Skillz Directory, and multiple other skill marketplaces. Run the recon command to see the current status of all configured marketplaces.

Do I need marketplace credentials to use this skill?

Some marketplaces like AgentSkill.sh allow anonymous submissions. Others like ClawHub require CLI authentication. Configure credentials separately before using automated publishing.

Can I publish multiple skills from one repository?

Yes. The skill detects repository layouts and can publish individual skills or entire packs. Some marketplaces import all SKILL.md files from a repository automatically.

What happens if a marketplace submission fails?

The tool reports detailed error messages and suggests next steps. Common failures include authentication errors, invalid metadata, or temporary marketplace outages.

How do I verify my skill was published successfully?

Use the verification playbook included with this skill. Each marketplace has specific verification steps including checking public URLs, search indexes, and submission status pages.

Can I undo or update a publication?

Updates depend on the marketplace. Some allow resubmission to update listings. Others require manual edits through seller dashboards. Check individual marketplace documentation.