Distribute
Run the CocoBrew marketplace distribution quality gate before publishing or...
Install
npx skills add Snowflake-Labs/cocoplus --skill distribute -g -a claude-code -y- Repository
- Snowflake-Labs/cocoplus727
- Category
- Engineering
- Updated
- 1mo ago
- License
- MIT
- Context cost
- Lightabout 654 tokens
- Runs scripts
- No, instructions only
What it does
Run the CocoBrew marketplace distribution quality gate before publishing or recommending a CocoPod skill.
Use this skill for $brew distribute <skill-path>.
Objective
Evaluate a CocoPod skill package before marketplace distribution or recommendation. The gate protects users from prompt-dump skills, undeclared permissions, install-time execution, untested behavior, and unjustified network use.
Five Criteria
- Explicit tool permissions: SKILL.md frontmatter must declare the tools or permissions the skill expects.
- Observable evals:
evals/must exist and contain at least one runnable evaluation. - Failure behavior: SKILL.md must document
on_failure:behavior or an equivalent failure-handling section. - No install-time execution: The package must not execute code during installation. Execution belongs only to explicit command invocations.
- Justified network use: Any
network:frontmatter declaration must includenetwork_justification:.
Verdicts
- Clear: All quality criteria pass and no security gate fails. Distribution may proceed.
- Advisory: One or more quality criteria are incomplete, but no security gate fails. Distribution requires developer acknowledgment and is not recommended automatically by CocoBrew.
- Block: A security criterion fails, install-time execution is detected, or the package omits critical permission declarations. Distribution stops. There is no bypass flag.
