TrustView
Publish Skill
skillerr/publish-skill
Submitted by @alex_kim · Alex Kim
Jul 12, 2026 · minted Jul 14, 2026
sha256:6d789b20ae83…Skill Score
85/ 100 · Strong seal
Skill Score is actively being developed and will get sharper over time.
- Sealed package20/20
Minted .skill blob in the registry
- Digest published15/15
sha256 pin published on skillerr.com
- Permissions declared15/15
Capabilities / permissions declared
- Source attested10/10
Namespace, submitter, or source URL (not a vendor endorsement)
- Transparency log0/15
Not anchored
- Release profile15/15
evaluateReleaseProfile passed
- Registry signal5/5
2760 install(s) on registry
- Not revoked5/5
No revocation on log
Not a malware scan. Not “safe to run.” Transparent registry signals only. Inclusion is not endorsement.
Install
npx @skillerr/add skillerr/publish-skillRegistry pin: sha256:6d789b20ae83… (shown on TrustView; install by name resolves to this sealed blob)
Sealed install targets
Writes publish-skill.skill (sealed ZIP) plus optional skillerr.json. Not a bare SKILL.md.
Sealed ZIP with digest + skillerr.json. Not a bare SKILL.md.
Free skills install with npx @skillerr/add. Sign in for account history.
Sealed artifact
Install and download deliver a digest-pinned open .skill package (docs.skillerr.com). Pasting a SKILL.md from the internet has none of this proof.
- ✓
publish-skill.skill ZIP
Open-protocol .skill ZIP (skill.json + workflow), not a public raw SKILL.md URL
- ✓
Registry digest pin
sha256:6d789b20ae83…
- ✓
Inspect before run
TrustView on skillerr.com; SKILL.md is a lossy adapter inside the package
- ✓
Permissions surface
Capabilities declared for review before install
- ✓
Transparency log
Inclusion proof in the skillerr.com registry log
Permissions map
Call remote APIs or fetch URLs
Declarations for humans and agents. Not a runtime sandbox guarantee.
Integrity verify
Confirm the digest on this page matches the live registry. This checks identity pins only: not a security scan.
expect sha256:6d789b20ae83bb61…npx @skillerr/add info skillerr/publish-skillcurl -sS https://skillerr.com/api/v1/skills/skillerr/publish-skill | grep -o '"digest":"[^"]*"'Summary
Publish a sealed .skill package to the skillerr.com registry with transparency-log entry.
Description
Upload a sealed package to skillerr.com, append a transparency-log registry_entry, and return the public skill URL plus install command. Requires a verified owner namespace. Pairs with pin-digest so consumers can lock the published digest in their projects.
Inspect package contentsSKILL.md inside .skill
TrustView preview on skillerr.com. Install and download serve the sealed package: there is no public raw SKILL.md URL.
--- name: publish-skill title: Publish Skill description: Publish a sealed .skill package to the skillerr.com registry with transparency-log entry. --- # Publish Skill Publish a sealed .skill package to the skillerr.com registry with transparency-log entry. ## Description Upload a sealed package to skillerr.com, append a transparency-log registry_entry, and return the public skill URL plus install command. Requires a verified owner namespace. Pairs with pin-digest so consumers can lock the published digest in their projects. ## Capabilities - net
Verified
- Public Ledger
- Not anchored
Transparency
- published_at
- 2026-02-01T15:00:00.000Z
- version
- 0.1.0
- updated_at
- 2026-07-05T10:00:00.000Z
- license
- MIT
- minted_at
- 2026-07-14T14:56:44.000Z
- permanence
- in registry log
- digest
- sha256:6d789b20ae83bb61e0d8841f66f7b0a566f40b7ad53813458c501a166238f13f
Public permanence uses Sigstore Rekor. The ledger link is shown when a real logIndex was recorded at mint. Green Anchored requires an offline inclusion proof verify. Catalog claims alone never paint Anchored. Inclusion is not endorsement.