skill-publish

Stale

hashgraph-online/skill-publish

GitHub Action and CLI to validate, monitor, and publish verifiable skills (SKILL.md) via Registry Broker

★ 165 starsLast commit 3 months agoLatest v1.0.13

/ 100

Security signals

OpenSSF ScorecardNo data

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: hashgraph-online/skill-publish@5ea6109cf9c3f8c3d9dad028f963790a56497257 # v1.0.13

Mutable tags like v1.0.13 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: hashgraph-online/skill-publish@5ea6109cf9c3f8c3d9dad028f963790a56497257 # v1.0.13

Score breakdown

Security (35%)50

Popularity (20%)31

Maintenance (30%)66

Reliability (15%)70