⚠
High Risk:This skill has significant security concerns. Review the findings below before installing.

skill-sharer

⚠Caution·Scanned 2/18/2026

This skill copies a local skill folder, sanitizes files, generates a README, and publishes the result to https://github.com/${REPO_OWNER}/${REPO_NAME}. The scripts execute shell commands (e.g. bash "$SCRIPT_DIR/sanitize.sh") and run git push, sending local files to GitHub and risking transmission of secrets if sanitization misses them.

from clawhub.ai·va36d3a1·14.6 KB·0 installs
Scanned from 1.0.0 at a36d3a1 · Transparency log ↗
$ vett add clawhub.ai/henrino3/skill-sharerReview security findings before installing

Skill Sharer

Publishes a local skill to henrino3/Enterprise-Crew-skills on GitHub.

What it does

  1. Copies the skill into a sanitized folder
  2. Strips personal information, secrets, IPs, paths, and credentials
  3. Generates a standalone README for the skill
  4. Updates the repo's root README with the new skill entry
  5. Commits and pushes

Usage

# Share a skill (interactive — reviews sanitization before pushing)
~/clawd/skills/skill-sharer/scripts/share-skill.sh <skill-folder-path> [--description "Short description"]

Examples

# Share session-cleaner
~/clawd/skills/skill-sharer/scripts/share-skill.sh ~/clawd/scripts/session-cleaner/ --description "Converts session JSONL to clean markdown"

# Share a skill from the skills directory
~/clawd/skills/skill-sharer/scripts/share-skill.sh ~/clawd/skills/weather/ --description "Get weather forecasts with no API key"

Sanitization rules

The script strips:

  • IP addresses — Tailscale IPs, public IPs, local IPs (replaced with <REDACTED_IP>)
  • Paths with usernames — /home/henrymascot/, /home/jamify/ → generic paths
  • API keys and tokens — anything matching key/token/secret patterns
  • Email addresses — real emails replaced with user@example.com
  • SSH connection strings — ssh user@host → ssh user@<your-host>
  • Server URLs with real hosts — internal URLs replaced with placeholders
  • Secret file references — ~/clawd/secrets/* → <YOUR_SECRET_FILE>
  • Tailscale hostnames — machine names replaced
  • Environment variable values — actual values stripped, variable names kept

Agent workflow

When Henry asks to share a skill:

  1. Identify the skill folder path
  2. Run share-skill.sh <path> --description "..."
  3. Review the sanitized output (script pauses for review)
  4. Confirm to push
  5. Report the GitHub URL to Henry

Repo structure

Enterprise-Crew-skills/
├── README.md              ← Root index (auto-updated)
├── session-cleaner/
│   ├── README.md
│   └── ...
├── new-skill/
│   ├── README.md
│   └── ...