@xiashe/skill

Creator-facing XiaShe Skill registry helper.

This package is intentionally separate from the full @xiashe/cli product CLI and from @xiashe/agent-skill, which is the runtime feed helper for external Agents.

Purpose

xiashe-skill helps creators prepare a Skill folder for XiaShe Store and Red Skill:

• inspect a local Skill project
• run one high-level Agent-friendly publish handoff command
• run lower-level registry setup commands that prepare XiaShe and Red handoffs
• generate a public-safe Agent Ack block for anonymous cross-platform install and call analytics
• diagnose whether a local Skill has the expected registry disclosure, Agent Ack instructions, and runtime callback wiring where supported
• send labeled local verification events so the Dashboard can confirm integration health
• write an explicit xiashe.skill.json registry manifest
• build and upload the XiaShe complete Skill package to XiaShe File Storage when the xiashe target is selected
• generate one unified UPLOAD_HANDOFF.md that the creator's Agent can use with Xiaohongshu's official skillhub-upload or uploader.md
• generate optional runtime analytics snippets

It does not install background services, run postinstall hooks, read secrets, or override Red Skill upload rules. XiaShe package upload is handled by this CLI for the XiaShe-owned registry; the creator's Agent is responsible only for third-party packaging and uploading according to Xiaohongshu's official flow.

The user-facing product flow should point creators at the official publish Markdown page and the xiashe-publish Skill. Direct CLI commands are implementation details for local Agents and developers.

setup --hub all now defaults to XiaShe Store and Red Skill. It writes private .xiashe/* handoff files for local Agents, uploads the XiaShe complete package as .tgz through the registry storage flow, plus writes no-secret public runtime protocol files at xiashe/runtime.yaml, xiashe/AGENT_ACK.md, and xiashe/REGISTRY_DISCLOSURE.md for Red Markdown/YAML source packages when the target platform accepts them. Users should not need to pick files manually. When Red Skill provides uploader.md, skillhub-upload, or its own upload prompt, follow that official flow first; XiaShe keeps tokens, signing secrets, package hashes, storage ids, and private handoff files local while recording Red usage through Agent Ack when the host Agent safely calls it.

Local development

node packages/xiashe-skill-cli/bin/xiashe-skill.mjs --help
node packages/xiashe-skill-cli/bin/xiashe-skill.mjs inspect .
node packages/xiashe-skill-cli/bin/xiashe-skill.mjs doctor .
node packages/xiashe-skill-cli/bin/xiashe-skill.mjs publish . --code XS-XXXX-XXXX --to xiashe,red
node packages/xiashe-skill-cli/bin/xiashe-skill.mjs setup . --code XS-XXXX-XXXX --hub all
node packages/xiashe-skill-cli/bin/xiashe-skill.mjs setup . --code XS-XXXX-XXXX --hub red
node packages/xiashe-skill-cli/bin/xiashe-skill.mjs verify . --hub red --dry-run --json
node packages/xiashe-skill-cli/bin/xiashe-skill.mjs verify . --hub red
node packages/xiashe-skill-cli/bin/xiashe-skill.mjs attach . --code XS-XXXX-XXXX
node packages/xiashe-skill-cli/bin/xiashe-skill.mjs attach . --public-token pub_xxx --skill-id sk_xxx
node packages/xiashe-skill-cli/bin/xiashe-skill.mjs prompt . --hub red --source-url https://example.com/my-skill-repo
node packages/xiashe-skill-cli/bin/xiashe-skill.mjs snippet . --target js
node packages/xiashe-skill-cli/bin/xiashe-skill.mjs track . --event skill_invoked --hub red --dry-run --json