skill-publish: GitHub Action and CLI to validate, monitor, and publish verifiable skills (SKILL.md) via Registry Broker

by hashgraph-online · Codex Skill · ★ 166

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

How to install skill-publish

npx skill-publish
npx skill-publish validate ./weather-skill

Taken from the project's README on GitHub.

Security audit verdict: SAFE · quality 71/100

None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

claudeclicodexgithub-actionprovenanceskillsverification

Quick Facts

Stars166
Forks2
LanguageJavaScript
CategoryCodex Skill
Quality Score71/100
Last Updated2026-04-13
Created2026-02-16
Platformsclaude-code, cli, codex, node
Est. Tokens~28k

About skill-publish

skill-publish Instead of sharing mutable URLs or copy/paste blobs, each release is recorded on Hedera (HCS) and exposed via references. That immutability is the value: the published artifact is tamper-evident, reproducible, and audit-friendly. Immutability gives you: Version pinning: consumers can depend on an exact .

Compatible Skills

These tools work well together with skill-publish for enhanced workflows:

  • agentshield — semantic(0.25)+complementary+similar_pop+shared_platform (49%)
  • mcp-evals — semantic(0.22)+complementary+similar_pop+shared_platform (48%)
  • github-topics-trending — semantic(0.18)+complementary+similar_pop+shared_platform (46%)

skill-publish alternative? Top 6 similar tools

Looking for a skill-publish alternative? If you're comparing skill-publish with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • agnix by agent-sh · ⭐ 468

    The missing linter and lsp for AI coding assistants. Validate CLAUDE.md, AGENTS.md, SKILL.md, hooks, MCP. Plug

  • claude-skills-journalism by jamditis · ⭐ 444

    Claude Code skills for journalism, media, and academia - verification, FOIA, data journalism, academic writing

  • skillport by gotalab · ⭐ 418

    Bring Agent Skills to Any AI Agent and Coding Agent — via CLI or MCP. Manage once, serve anywhere.

  • ClaudeR by IMNMV · ⭐ 364

    Connect RStudio to Claude Code, Codex, Gemini, and other LLM agents via MCP. Multi-agent orchestration, automa

  • mcp-linker by milisp · ⭐ 345

    Manage MCP servers, skills and plugins across Claude Code, Codex, Cursor and more. Built-in marketplace, one-c

  • mcpick by spences10 · ⭐ 96

    Vendor-neutral MCP configuration manager — one CLI to add, toggle, and audit MCP servers and skills across eve

More Codex Skill Tools

Explore other popular codex skill tools:

View all Codex Skill tools →

Popular JavaScript Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse Codex Skill tools