TokenRollAI/npm-publish
skills/npm-publish/SKILL.md
Publish acplugin to npm with version bump, build, test, and 2FA handling
$ install --global
skillsauthnpx skillsauth add TokenRollAI/acplugin npm-publishInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 22, 2026, 1:59 AM121.0s1 file scanned
SKILL.md
- name:
- npm-publish
- description:
- Publish acplugin to npm with version bump, build, test, and 2FA handling
- disable-model-invocation:
- true
npm 发布流程
步骤
-
版本升级
npm version <major|minor|patch> --no-git-tag-version -
构建 + 测试
npm run build && npm test -
检查打包内容（确认无测试文件）
npm pack --dry-run -
发布 账号有 2FA，需要用户手动输入 OTP：
提示用户运行: ! npm publish --access=public -
Commit + Push
git add package.json package-lock.json git commit -m "chore: bump version to $(node -p 'require("./package.json").version')" git push
注意事项
- 包名是
@disdjj/acplugin（scoped），必须加--access=public - 不要尝试在脚本中自动发布，2FA 会阻塞
prepublishOnly脚本会自动编译files字段已排除dist/__tests__/
Related Skills
TokenRollAI/add-platform
tools
VerifiedTrustedCommunity
Add support for a new target platform to acplugin (e.g., Windsurf, Zed, etc.)
29SKILL.mdUpdated Apr 21, 2026
TokenRollAI/add-converter
tools
VerifiedTrustedCommunity
Add a new resource type converter to acplugin (e.g., adding support for converting a new Claude Code resource type)
29SKILL.mdUpdated Apr 21, 2026
openclaw/taskflow
tools
VerifiedTrustedCommunity
Use when work should span one or more detached tasks but still behave like one job with a single owner context. TaskFlow is the durable flow substrate under authoring layers like Lobster, ACPX, plugins, or plain code. Keep conditional logic in the caller; use TaskFlow for flow identity, child-task linkage, waiting state, revision-checked mutations, and user-facing emergence.
357,764SKILL.mdUpdated Apr 10, 2026
openclaw/extensions/lobster
tools
VerifiedTrustedCommunity
# Lobster Lobster executes multi-step workflows with approval checkpoints. Use it when: - User wants a repeatable automation (triage, monitor, sync) - Actions need human approval before executing (send, post, delete) - Multiple tool calls should run as one deterministic operation ## When to use Lobster | User intent | Use Lobster? | | ------------------------------------------------------ | --------------------------
357,764SKILL.mdUpdated Apr 10, 2026