How do I install skill-sync-publisher?

Install skill-sync-publisher in your harness: Codex — codex plugin marketplace add liuyewang/skill-sync-publisher; Any agent — npx skills@1.7.4 add liuyewang/skill-sync-publisher. Full step-by-step guidance is on the HOL plugin page.

How do I install skill-sync-publisher in Codex?

To install skill-sync-publisher in Codex, start with codex plugin marketplace add liuyewang/skill-sync-publisher. The complete step-by-step install guide for Codex is on the HOL plugin page.

How is the Trust Score for skill-sync-publisher computed?

skill-sync-publisher has a HOL Trust Score of 74 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/liuyewang%2Fskill-sync-publisher/trust

Who publishes skill-sync-publisher?

skill-sync-publisher is published by liuyewang and listed on HOL.

skill-sync-publisher

liuyewang/skill-sync-publisher · v0.1.0 · Development & Workflow

by liuyewangScan grade: review

Safely synchronize this Codex skill across public agent-skill registries.

Install Source Claim this plugin

Follow0

Trust Score74 Security scan71 Components2

Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is skill-sync-publisher a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

Codex

2 skills

Before you install

Sign-in: Asks you to sign in when you install it
Declared access: Interactive, Read, Write
License: MIT

Check before relying on it

Some security checks did not finish: Cisco skill scan and HOL plugin scan. See the evidence
2 medium findings from the scan. See the evidence
The publisher has not verified ownership on HOL.

What is skill-sync-publisher?

skill-sync-publisher is a published development & workflow plugin for AI coding agents in the Codex ecosystem, developed by liuyewang and distributed through the HOL AI plugin registry. Safely synchronize this Codex skill across public agent-skill registries.

Canonical slug: liuyewang/skill-sync-publisher
Version: v0.1.0 · updated Sep 20, 2026
Open data: entity.json (JSON-LD)

Registry snapshot

Repository: https://github.com/liuyewang/skill-sync-publisher
Canonical profile: https://hol.org/registry/plugins/liuyewang%2Fskill-sync-publisher
Owner verification: Not verified
Scanner: Registry fallback scan
Security result: Needs review
Digest verified: Yes

2 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability

76/100

Maintenance

55/100

MCP server setup

100/100

Plugin Security

71/100

Provenance

70/100

Publisher Quality

75/100

Provenance

Plugin root: .
Source repo: https://github.com/liuyewang/skill-sync-publisher
Source commit: 2715719c7ad1…
Publisher verified: No
Owner verified: Not owner verified

Continuous scanner CI detected

No action is required. This plugin receives the full trust score.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed

Needs review

Security result

Security score

High findings

Provider: registry-broker-fallback
Grade: C · review
Version: Unknown

cisco-skill-scanner: unknown

Published advisories

None matched in GitHub security advisories, checked 2026-10-30. This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

mediumpublishabilitypublishability.link.missing.privacyPolicyURL

privacyPolicyURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.termsOfServiceURL

termsOfServiceURL should be present for marketplace readiness.

lowoperational-securitysupply-chain.lockfile-missing

Repository snapshot does not include a lockfile.

infoskill-securityskill-scan.unavailable

Script permission declarations are required for scripts/: scripts/__init__.py, scripts/versioning.py, scripts/preflight.py, scripts/layout.py, scripts/state.py, scripts/sync.py, scripts/adapters.py

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

Install guidance

Install in Codex

Install through the Codex CLI plugin marketplace.

Codex plugin docs

Optional: install HOL Guard for Codex first, so it can check this plugin's tools on your machine before Codex uses them.

1
Register the marketplace
Run in any terminal. Codex reads the marketplace entry from .agents/plugins/marketplace.json (or the legacy .claude-plugin path) in the repository. If the repository ships none, add the generated entry from the Advanced section below first.
shell
2
Install from the Plugins browser
Open Codex, open the Plugins browser, choose the marketplace registered by the previous command, and install skill-sync-publisher.
3
Check the marketplace is registered
This confirms the marketplace source only. Confirm the plugin itself is enabled in the Plugins browser before relying on it.
shell

Did setup work in Codex?

No setup reports for Codex yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "skill-sync-publisher",
  "version": "0.1.0",
  "description": "Safely synchronize a Codex skill across GitHub and public agent-skill registries.",
  "author": {
    "name": "liuyewang",
    "url": "https://github.com/liuyewang"
  },
  "homepage": "https://github.com/liuyewang/skill-sync-publisher",
  "repository": "https://github.com/liuyewang/skill-sync-publisher",
  "license": "MIT",
  "keywords": [
    "skill",
    "sync",
    "publishing",
    "registries",
    "codex"
  ],
  "skills": "./",
  "interface": {
    "displayName": "Skill Sync Publisher",
    "developerName": "liuyewang",
    "shortDescription": "Publish skills safely across registries",
    "longDescription": "Validate a local skill, remember platform choices, gate authentication, and synchronize the source across GitHub and public agent-skill registries with dry-runs and resumable status.",
    "category": "Developer Tools",
    "capabilities": [
      "Interactive",
      "Read",
      "Write"
    ],
    "websiteURL": "https://github.com/liuyewang/skill-sync-publisher",
    "defaultPrompt": [
      "Preflight this skill and show a multi-platform sync plan",
      "Synchronize this skill to its enabled registries",
      "Show which registry submissions are blocked or pending"
    ],
    "brandColor": "#2563EB",
    "composerIcon": "./assets/skill-sync-publisher.svg",
    "logo": "./assets/skill-sync-publisher.svg",
    "screenshots": []
  },
  "registryIndexVersion": 5
}

Marketplace source

Repo URL: https://github.com/liuyewang/skill-sync-publisher
Marketplace path: Unknown
Source path: plugins/liuyewang/skill-sync-publisher
Install policy: AVAILABLE

Skills

2 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

skills-cli

skill-sync-publisher
SKILL.md
Safely validate, publish, and track a local SKILL.md directory across GitHub, Awesome Codex Plugins, HOL Registry, skills.sh, SkillsMP, LobeHub, ClawHub, and Cursor Directory. Use when the user asks to publish, update, register, or synchronize an agent skill across marketplaces.
Raw SKILL.md
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
skill-sync-publisher
skills/skill-sync-publisher/SKILL.md
Safely validate, publish, and track a local SKILL.md directory across GitHub, Awesome Codex Plugins, HOL Registry, skills.sh, SkillsMP, LobeHub, ClawHub, and Cursor Directory. Use when the user asks to publish, update, register, or synchronize an agent skill across marketplaces.
Raw SKILL.md
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.codex-plugin/plugin.json

plugin-manifest

1,261 bytes

9d0027d7da281c3c…

.github/dependabot.yml

file

23 bytes

543cd33f42ef0dab…

.github/workflows/hol-plugin-scanner.yml

file

919 bytes

d80efe109901f157…

agents/openai.yaml

file

204 bytes

8936f1720ba34b52…

assets/skill-sync-publisher.svg

asset

427 bytes

a18f10cfcc09a8d1…

README.md

file

731 bytes

23f611a9ea50751b…

references/platform-matrix.md

file

1,351 bytes

2f32b065ed8ed0f7…

references/security-policy.md

file

567 bytes

779a84cb14213247…

references/state-schema.md

file

934 bytes

b3eb6e193c59ff6e…

scripts/__init__.py

file

55 bytes

952bf50d13c0416b…

scripts/adapters.py

file

13,828 bytes

17a252b7c7b19445…

scripts/layout.py

file

1,188 bytes

7c93322094f5b874…

scripts/preflight.py

file

5,158 bytes

87ecc7fa2d640d33…

scripts/state.py

file

3,225 bytes

848bcba1d653f532…

scripts/sync.py

file

8,495 bytes

362da3ddd69d80fb…

scripts/versioning.py

file

943 bytes

ef9c8c53825bf898…

SECURITY.md

file

395 bytes

d656fefe3745d039…

SKILL.md

skill

3,156 bytes

ebda77f7d4988a4d…

skills/skill-sync-publisher/agents/openai.yaml

skill

204 bytes

8936f1720ba34b52…

skills/skill-sync-publisher/SKILL.md

skill

3,156 bytes

ebda77f7d4988a4d…

tests/test_sync.py

file

7,483 bytes

bb5a14fa0496b027…