Menú
Verify a clawvet release is actually consistent across npm, git tags, GitHub Releases, ClawHub, and the Claude plugin marketplace. Use before cutting a release, after publishing, or whenever a version looks stale anywhere.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Basado en la clasificación ocupacional SOC
Code quality and safety linter for OpenClaw skills. Runs 6 analysis passes before you install.
Vet any OpenClaw skill for prompt injection, credential theft, and RCE before you install it. Runs a clawvet scan and blocks risky installs.
Creates the directories used by this skill.
Prepares the local environment for other skills.
Reviews public social evidence packets before operator-approved actions.
A REST API client that helps you test endpoints interactively.
| name | release-check |
| description | Verify a clawvet release is actually consistent across npm, git tags, GitHub Releases, ClawHub, and the Claude plugin marketplace. Use before cutting a release, after publishing, or whenever a version looks stale anywhere. |
| allowed-tools | ["Bash","Read","Edit"] |
clawvet ships to five places that drift independently. Verify state; never infer it from a success screen.
node scripts/release-check.mjs
Exit 0 = no hard failures. Exit 1 = at least one FAIL. Report the output as-is and fix what it flags — do not summarize a FAIL away.
| Channel | How it updates | Automated? |
|---|---|---|
| npm | v* tag push → .github/workflows/release.yml | yes |
| GitHub Release | same workflow, after the npm publish | yes |
| git tag | git push origin v<version> | manual |
| Claude plugin marketplace | pushing to master is the release | nothing to do |
| ClawHub | web UI only | manual |
packages/cli/package.json, add a ## <version> entry to CHANGELOG.md.
Update the root SKILL.md frontmatter version too — that file is what a
ClawHub re-import reads.git tag v<version> and git push origin master && git push origin v<version>.
The tag push is the trigger — pushing master alone publishes nothing.SKILL.md frontmatter entirely. It will never
track npm exactly. The check reports ClawHub's version; it never asserts equality.clawvet-guard must have exactly one tracked SKILL.md, under
plugins/clawvet-guard/skills/. ClawHub matches on slug, not path, so one file
serves both ClawHub and the Claude marketplace. A second copy silently drifts.## <version> in CHANGELOG — the bump was committed without release notes.