| name | skill-sync-publisher |
| description | Safely validate, publish, and track a local SKILL.md directory across GitHub, Awesome Codex Plugins, HOL Registry, skills.sh, SkillsMP, LobeHub, ClawHub, and Cursor Directory. Use when the user asks to publish, update, register, or synchronize an agent skill across marketplaces. |
Skill Sync Publisher
Use the bundled CLI to preflight and synchronize one local skill directory. The
source GitHub repository is canonical; registry entries are projections of that
source. Read references/platform-matrix.md before working with a platform and
references/security-policy.md when preflight reports a security finding.
Safety rules
- Start with
python3 scripts/sync.py preflight <skill-dir> or --dry-run.
- Never collect or store passwords, tokens, cookies, or private keys.
- Ask before the first submission to each platform. Persist choices per GitHub
repository, skill path, and platform in the user state file, not the repo.
- Require the user to complete login before running an authenticated identity
check. A failed check blocks only that platform.
- Show the exact diff and commit scope before GitHub commit/push.
- Use official CLIs when available. For directory sites without a supported
API/CLI, create a browser/manual handoff instead of inventing an endpoint.
- Never touch unrelated dirty files, force-push, or roll back successful targets.
Commands
Run bin/skill-sync from the repository root:
bin/skill-sync init <skill-dir>
bin/skill-sync preflight <skill-dir>
bin/skill-sync layout --check
bin/skill-sync layout --write
bin/skill-sync sync <skill-dir> --dry-run --json
bin/skill-sync sync <skill-dir> --platform github,clawhub
bin/skill-sync sync <skill-dir> --resume
bin/skill-sync status <skill-dir> --refresh
bin/skill-sync reset-choice <skill-dir> <platform>
bin/skill-sync reset-all <skill-dir>
bin/skill-sync forget <skill-dir>
skills/skill-sync-publisher/ is the canonical skill content. Root SKILL.md
and agents/openai.yaml are generated mirrors; use layout --write after a
canonical change and layout --check in CI.
sync is confirmation-gated by default. --yes is intended for an already
reviewed, authenticated automation job; it does not bypass platform choice or
security blockers. The CLI returns non-zero if a selected platform fails or is
blocked.
Platform behavior
- GitHub: commit and push only the target skill files after confirmation.
- Awesome Codex Plugins: create or update a PR only when a valid plugin manifest
exists; ordinary skills are blocked unless explicitly projected.
- HOL Registry: use the official
npx @hol-org/registry quote/publish flow and
require REGISTRY_BROKER_API_KEY before an authenticated publish.
- ClawHub: use
clawhub whoami, dry-run, then the manifest version as semver.
- skills.sh, SkillsMP, LobeHub, Cursor Directory: verify public GitHub source
and produce/check an index or browser handoff;
planned is not success.
Never publish to an unselected platform, duplicate an open PR, or claim that a
manual directory submission is complete before the user confirms it.
