skill-marketplace-publisherlisted

# Skill Marketplace Publisher ## Overview Use this workflow when a local skill should become a public, reviewable marketplace submission. It covers four things end-to-end: public-safety audit, public packaging, GitHub publication, and marketplace submission. This skill is optimized for: - `Skillstore` self-serve submission - `SkillMap` listing request via its current public intake channels - any future marketplace that expects a public GitHub repo with a valid `SKILL.md` ## Required Inputs Before running the workflow, confirm: 1. the source skill path 2. the target marketplace list 3. the public GitHub repo owner/name 4. whether the source skill is already public-safe or must be packaged in `public` mode first If the user asks to publish a skill but does not say otherwise, assume: - target mode: `public` - source of truth stays in `ai-shared/skills/` - packaged output goes to `ai-shared/skill-packages/` ## Workflow ### Step 1: Audit Public Safety Run the local scanner first. It looks for secrets, local absolute paths, secret-hub references, and obvious non-portable material. ```bash python3 scripts/public_skill_audit.py /absolute/path/to/skill ``` Interpretation: - no `HIGH` findings: okay to continue - `HIGH` findings: stop and sanitize first - `MEDIUM` findings: review manually before publishing If the skill references shared secrets, local private paths, or owner-only runtime assumptions, do not publish the source folder directly. ### Step 2: Decide Source