Clawhub Web Publisher

ClawHub Web Publisher

Publish a local skill to ClawHub through https://clawhub.ai/dashboard with strict privacy controls.

Hard Rules

• Never use clawhub login, clawhub login --token, or device flow.
• Use the already signed-in browser session for dashboard upload.
• Never include secrets in published files:
  • API keys
  • gateway tokens
  • personal emails and phone numbers
  • local absolute paths pointing to private user directories

Preflight

1. Confirm target folder contains SKILL.md.
2. Confirm SKILL.md frontmatter includes:
   • name
   • description
3. Scan for secret leakage patterns:
   • apiKey
   • token
   • OPENCLAW_
   • sk-
   • Bearer

If any high-risk text appears, stop and sanitize before publish.

Web Publish Procedure

1. Open https://clawhub.ai/dashboard.
2. Enter the upload/publish flow.
3. Select the local skill directory.
4. Fill listing title and short description:
   • title: clear benefit + audience
   • description: action-oriented and outcome-focused
5. Submit publish.
6. Capture outputs:
   • final skill URL
   • skill ID (if shown)
   • version (if shown)

Quality Gate Before Marking Done

• Listing URL opens successfully.
• Name matches SKILL.md name.
• Description does not promise unsupported behavior.
• No credential-like strings appear in listing or content.

Completion Evidence Format

Return all fields:

PUBLISH_RESULT
- skill_name:
- version:
- url:
- skill_id:
- verification:
  - url_status:
  - privacy_scan:
  - notes:

Failure Recovery (Still Web-Only)

If publish fails:

1. Refresh dashboard and retry once.
2. Re-open upload flow in same signed-in browser profile.
3. Reduce metadata length and retry.
4. If still blocked, return exact blocker text and a minimal next action for user.