Claw Release
This "Claw Release" skill safely removes sensitive credentials from code repositories, preventing accidental exposure and bolstering security practices.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add claw-release npx -- -y @trustedskills/claw-release
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"claw-release": {
"command": "npx",
"args": [
"-y",
"@trustedskills/claw-release"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
The Claw Release skill is an internal tool developed by Prompt Security to automate the release and management of skills within the ClawSec catalog. It streamlines the process of versioning, tagging, committing changes, pushing updates to a remote repository (GitHub), and publishing GitHub Releases for these skills. This ensures consistent and reliable distribution of skills while maintaining proper version control.
When to use it
This skill is intended for specific scenarios:
- Releasing new versions of Prompt Security skills.
- Publishing pre-release versions (beta, alpha, release candidates) of skills.
- Managing the ClawSec catalog and ensuring accurate skill metadata.
- Automating the creation of GitHub Releases with associated checksums and packages.
Key capabilities
- Automates version incrementing based on change type (patch, minor, major, pre-release).
- Validates semantic versioning format.
- Updates
skill.jsonandSKILL.mdfiles with the new version number. - Creates annotated Git tags for releases.
- Pushes commits and tags to a remote GitHub repository.
- Generates checksums from Software Bill of Materials (SBOM).
- Creates .skill packages (ZIP archives) for distribution.
- Automatically marks pre-release versions in GitHub Releases.
Example prompts
Due to the nature of this tool, it is not directly prompted by a user. Instead, it's executed via command line:
./scripts/release-skill.sh <skill-name> <new-version>(e.g.,./scripts/release-skill.sh my-skill 1.2.3)./scripts/release-skill.sh <skill-name> 1.0.0-beta1
Tips & gotchas
- Internal Use Only: This skill is designed for internal use by Prompt Security maintainers and should not be used externally.
- Prerequisites: Requires bash, git, jq, and gh (GitHub CLI) to be installed and configured. Authenticated GitHub CLI with permission to create releases is also needed.
- Clean Working Tree: The script requires a clean working tree before execution to avoid conflicts.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.