Skip to content

README.md

Latest commit

 

History

History
45 lines (38 loc) · 1.9 KB

README.md

File metadata and controls

45 lines (38 loc) · 1.9 KB

OpenClaw / ClawHub Skill Publishing

Ownership. These skills are owned and maintained by agent-bom. OpenClaw and ClawHub are distribution surfaces — they package and surface agent-bom skills for installation; the implementation, version, security review, and release cadence stay with agent-bom.

agent-bom keeps the public ClawHub surface intentionally small.

Published skills:

  • agent-bom-scan
  • agent-bom-registry
  • agent-bom-compliance
  • agent-bom-runtime
  • agent-bom-discover-aws
  • agent-bom-discover-azure
  • agent-bom-discover-gcp
  • agent-bom-discover-snowflake
  • agent-bom-ingest
  • agent-bom-vulnerability-intel

These are the only skills pushed by release automation. They are:

  • focused enough for individual and team use
  • small enough to review and understand quickly
  • explicit about credentials, file reads, network calls, and guardrails

Not published to ClawHub:

  • the oversized omnibus root skill in SKILL.md
  • internal or narrower sub-skills such as discover, analyze, enforce, monitor, scan-infra, and troubleshoot

Reason:

  • public marketplace skills should be curated, guardrailed, and easy to audit
  • broader internal skill composition can stay in-repo without becoming the default public install surface

When updating versions for release, update only the published skill frontmatter unless a private/internal skill is intentionally being prepared for publication: