[Follow-up] Authorize and verify external registry submissions

[edithatogo]

Purpose

Execute external registry and marketplace submissions only after an explicit destination-and-version authorization.

Candidate destinations

• skills.sh discovery/listing verification
• VoltAgent curated-list replacement
• Claude marketplace/directory
• Gemini extension gallery
• any documented OpenAI third-party route that provides value beyond the skill-only package

Exit criteria

• authorization receipt identifies destination and version
• submitted artifact is generated from the canonical release
• review and acceptance/rejection are recorded separately
• clean hosted installation is verified
• registry matrix and badges are updated only after acceptance

Follow-up from #245. No publication is currently claimed.

[edithatogo]

2026-08-10 destination refresh and execution packet

All checks below are non-publishing. No submission or acceptance is claimed.

Current package receipt

• canonical release: 3.2.0
• source commit tested: 252c6ece0b1a884fed8a2708e7081121778926b1
• portable package: gh skill publish --dry-run passes
• repository preview: gh skill preview edithatogo/authentext authentext currently reports no discoverable skill because the maintained repository intentionally does not check in a duplicate skills/authentext adapter tree
• Gemini native and generated-extension lifecycle: verified in [Follow-up] Verify Gemini CLI native lifecycle on Windows #269

Destination dispositions

1. GitHub/Copilot skill publishing — ready, authorization required

   • GitHub documents gh skill publish as the public-preview publication command and --dry-run as its non-publishing validator.
   • Required authorization receipt: Publish Authentext 3.2.0 through GitHub/Copilot using a generated canonical package.
   • Packaging decision still required at execution time: publish from a dedicated distribution repository or an approved generated release surface; do not add a maintained adapter copy to this repository.
   • Spec: https://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-cloud-agent/add-skills

2. skills.sh — structurally blocked, no direct submission action

   • Listing is automatic from CLI installation telemetry, not a review form.
   • The current canonical repository is not discoverable by the preview CLI because it lacks a checked-in supported skills directory.
   • The safe route is a dedicated generated distribution repository, which would then be installed by its GitHub coordinate. Creating that repository and publishing 3.2.0 require explicit authorization.
   • Spec: https://www.skills.sh/docs/faq

3. Claude community marketplace — ready, authorization required

   • Anthropic now documents a third-party community marketplace and submission forms; inclusion follows automated validation and safety screening and remains separate from submission.
   • The generated skill-only Claude package is locally validated. A public distribution repository or hosted marketplace source is required.
   • Required authorization receipt: Submit Authentext 3.2.0 to the Claude community marketplace from <approved repository>.
   • Spec: https://code.claude.com/docs/en/discover-plugins

4. Gemini extension gallery — ready, authorization required

   • Gallery discovery is automatic: a public GitHub repository must have the gemini-cli-extension topic, a root gemini-extension.json, and a tag; the crawler runs daily.
   • The main Authentext repository intentionally does not keep that root adapter manifest. The safe route is a dedicated generated extension repository/release.
   • Required authorization receipt: Create/use <repository>, publish Authentext 3.2.0, add the gemini-cli-extension topic, and tag the approved release.
   • Spec: https://geminicli.com/docs/extensions/releasing/

5. VoltAgent curated list — deferred on eligibility evidence

   • Its contribution guide requires a public working skill, a short entry, and real community usage; brand-new/unproven entries are not accepted.
   • No fabricated usage claim will be made. Reassess after hosted installation/usage evidence exists.
   • Spec: https://github.com/VoltAgent/awesome-agent-skills/blob/main/CONTRIBUTING.md

6. OpenAI/ChatGPT plugin — not justified at present

   • Authentext needs no MCP server, app, hook, or executable tool. The portable Codex skill supplies the intended capability without expanding the security boundary.
   • Retain as deferred unless a distinct plugin capability is approved.

7. OpenCode npm plugin — not justified

   • Native Agent Skills satisfy the use case; no unique executable hooks or tools are required.

Recommended sequence after authorization

1. Approve a dedicated generated distribution repository and Authentext version 3.2.0.
2. Publish the GitHub/Copilot skill package and verify a clean hosted install.
3. Recheck automatic skills.sh discovery after real installs.
4. Publish the same canonical release as Claude and Gemini skill-only wrappers, sequentially.
5. Record submission, review, acceptance, listing, and install receipts as distinct states.
6. Reassess VoltAgent only after usage evidence exists.

The issue remains open because the next operation creates external public state and requires a destination-and-version authorization.

[edithatogo]

2026-08-11 publication receipt

Authorization was supplied in this thread for Authentext 3.2.0 and the named destinations.

Published and verified

• Distribution repository: https://github.com/edithatogo/authentext-distribution (public, default branch main)
• Release: https://github.com/edithatogo/authentext-distribution/releases/tag/v3.2.0 (published 2026-08-10T12:24:26Z; not draft or prerelease)
• GitHub/Copilot: gh skill publish --tag v3.2.0 completed; gh skill preview edithatogo/authentext-distribution authentext succeeded; pinned user-scope install from authentext@v3.2.0 was verified.
• Gemini: the root gemini-extension.json, gemini-cli-extension topic, and v3.2.0 release meet Gallery crawler inputs; a pinned hosted install from the GitHub release and clean uninstall were verified. Gallery indexing/acceptance is still pending and is not claimed.

Pending / blocked

• Claude Community Marketplace: the distributable contains .claude-plugin/plugin.json and .claude-plugin/marketplace.json, but no submission receipt exists. Browser automation was stopped by its URL-confidence safeguard and the alternate in-app browser runtime failed to initialize. This remains prepared, not submitted.
• skills.sh: automatic discovery/listing must be rechecked after telemetry/indexing; no listing is claimed here.
• VoltAgent: remains deferred until genuine usage evidence satisfies its contribution policy.

The issue remains open because its exit criteria require the Claude submission outcome and separate marketplace acceptance/listing evidence.

[edithatogo]

2026-08-11 Claude Marketplace submission receipt

Authentext 3.2.0 was submitted through the authenticated Anthropic Plugin Directory form from:

• repository: https://github.com/edithatogo/authentext-distribution
• submission dashboard: https://platform.claude.com/plugins/submissions
• supported surface selected: Claude Code
• licence supplied: MIT
• contact address: the authenticated account address already present in the Anthropic form

The post-submit confirmation stated Plugin submitted for review and the submissions dashboard now shows Authentext — Submitted and pending review.

This records submission only. Marketplace acceptance/listing is still pending and is not claimed.