← Back to Skills Marketplace
adtomato

Hxd Deploy

by xiaodouzi · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
102
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install hxd-deploy
Description
部署霍小钉服务到服务器。自动上传 JAR 文件、备份旧版本、重启服务。
README (SKILL.md)

霍小钉服务部署工具

自动化部署霍小钉 Spring Boot 服务到远程服务器。

触发条件

当用户提到以下关键词时自动触发:

  • "部署霍小钉"
  • "部署 hxd"
  • "部署服务"
  • "更新霍小钉"
  • "发布霍小钉"
  • "hxd 部署"
  • "霍小钉上线"

部署配置

服务器信息

  • IP: 203.170.59.16
  • 用户: root
  • SSH 私钥: ~/.ssh/id_ed25519

文件路径

  • 本地 JAR: D:\springboot\hxd arget\hxd-0.0.1-SNAPSHOT.jar
  • 远程目录: /hjxz/hxd-api/lib
  • 远程脚本: /hjxz/hxd-api/bin/hxd-api
  • 日志文件: /hjxz/hxd-api/logs/wrapper.log

部署步骤

1. Maven 打包(新增)

在上传 JAR 之前,先执行 Maven 打包命令:

cd "D:\springboot\hxd"
mvn clean package -Pprod -DskipTests

打包完成后检查生成的 JAR 文件是否存在。

2. 检查本地 JAR 文件

Test-Path "D:\springboot\hxd	arget\hxd-0.0.1-SNAPSHOT.jar"

如果文件不存在,检查 Maven 打包是否成功。

3. SSH 连接测试

ssh -i "$env:USERPROFILE\.ssh\id_ed25519" -o StrictHostKeyChecking=no [email protected] "echo 'SSH connection successful'"

4. 上传 JAR 文件

$timestamp = Get-Date -Format "yyyy-MM-dd-HH-mm"
scp -i "$env:USERPROFILE\.ssh\id_ed25519" -o StrictHostKeyChecking=no "D:\springboot\hxd	arget\hxd-0.0.1-SNAPSHOT.jar" "[email protected]:/hjxz/hxd-api/lib/hxd-0.0.1-SNAPSHOT.jar"

5. 备份旧版本并替换

ssh -i "$env:USERPROFILE\.ssh\id_ed25519" -o StrictHostKeyChecking=no [email protected] @"
cd /hjxz/hxd-api/lib
mv hxd.jar hxd.jar.bak$timestamp
mv hxd-0.0.1-SNAPSHOT.jar hxd.jar
"@

6. 重启服务

ssh -i "$env:USERPROFILE\.ssh\id_ed25519" -o StrictHostKeyChecking=no [email protected] "/hjxz/hxd-api/bin/hxd-api restart"

7. 验证服务状态

# 检查服务状态
ssh -i "$env:USERPROFILE\.ssh\id_ed25519" -o StrictHostKeyChecking=no [email protected] "cat /hjxz/hxd-api/bin/hxd-api.status"

# 检查日志(最近 30 行)
ssh -i "$env:USERPROFILE\.ssh\id_ed25519" -o StrictHostKeyChecking=no [email protected] "tail -30 /hjxz/hxd-api/logs/wrapper.log"

输出要求

部署完成后报告:

  1. ✅ JAR 文件上传状态
  2. ✅ 备份文件名称(带时间戳)
  3. ✅ 服务重启状态(PID、状态)
  4. ✅ 服务运行状态(从日志确认)
  5. ⚠️ 任何警告或错误信息

错误处理

常见问题

  1. SSH 连接失败

    • 检查私钥文件是否存在
    • 检查服务器是否可达
    • 提示用户检查网络或 SSH 配置
  2. JAR 文件不存在

    • 提示用户先执行 Maven 构建:mvn clean package
    • 检查构建路径是否正确
  3. 服务启动失败

    • 查看完整日志:tail -100 /hjxz/hxd-api/logs/wrapper.log
    • 检查端口占用:netstat -tlnp | grep 9999
    • 检查磁盘空间:df -h
  4. 备份失败

    • 检查文件权限
    • 检查磁盘空间

示例对话

用户: 部署一下霍小钉服务

助手: 好的,开始部署霍小钉服务...

  • ✅ JAR 文件已上传
  • ✅ 旧版本备份为 hxd.jar.bak2026-03-25-16-56
  • ✅ 服务已重启,PID: 21499,状态:STARTED
  • ✅ 服务正常运行,端口 9999

部署完成!🫘


注意事项

  1. 部署时间: 避免在业务高峰期部署(工作日 9:00-18:00)
  2. 备份保留: 保留最近 2-3 个备份版本,避免磁盘占满
  3. 日志检查: 每次部署后必须检查日志确认服务正常
  4. 回滚方案: 如需回滚,将备份文件改名为 hxd.jar 后重启服务

快速回滚命令

# 回滚到上一个版本
ssh -i "$env:USERPROFILE\.ssh\id_ed25519" -o StrictHostKeyChecking=no [email protected] @"
cd /hjxz/hxd-api/lib
ls -lt hxd.jar.bak* | head -1 | awk '{print \$NF}' | xargs -I {} cp {} hxd.jar
/hjxz/hxd-api/bin/hxd-api restart
"@
Usage Guidance
This skill appears to implement an automated deploy for a specific server, but it has several red flags you should address before installing or running it: - Do not run it without verifying the target server: confirm 203.170.59.16 is your intended host and that running commands as root is acceptable. - The SKILL.md expects to use your private SSH key (~/.ssh/id_ed25519 or $env:USERPROFILE\.ssh\id_ed25519). Treat this as highly sensitive: only allow access after reviewing the commands and ensuring the agent/process will not copy or transmit the private key elsewhere. - The skill did not declare required binaries (mvn, ssh, scp, tail, netstat, awk) or required config/credentials. Prefer a version that exposes server IP, user, key path, and local build path as explicit, user-confirmed inputs rather than hard-coded values. - Because the skill can be invoked automatically by trigger phrases, consider disabling autonomous invocation or removing the automatic triggers until you’ve validated behavior. - If you want to use this, request a modified SKILL.md that: parameterizes the server and key, documents required binaries, and explicitly asks for permission to access the SSH key (or uses a deploy user with limited privileges / deploy key). If you cannot confirm the host, key usage, and that the commands are safe, do not run this skill.
Capability Analysis
Type: OpenClaw Skill Name: hxd-deploy Version: 1.0.0 The skill automates software deployment but exhibits high-risk patterns, including hardcoded root access to a specific IP (203.170.59.16), use of the user's private SSH key (~/.ssh/id_ed25519), and disabling of SSH host key verification in SKILL.md. While these actions are functionally consistent with the stated goal of deploying a service, the hardcoded infrastructure and broad shell execution capabilities represent significant security risks and potential for misuse if the target environment is untrusted.
Capability Assessment
Purpose & Capability
The skill's name/description (deploy Hxd service) aligns with the actions in SKILL.md: building a JAR, uploading it, backing up, restarting and checking logs on a remote server. However the skill hard-codes a specific server IP (203.170.59.16), the root user, and local Windows build paths, which makes it narrowly targeted and brittle; reasonable deploy tooling would expose these as configurable rather than baked into the instructions.
Instruction Scope
The SKILL.md instructs the agent to run local build commands (mvn), check local file paths (D:\... target JAR), use scp/ssh to connect as root to a remote host, and read/use the user's SSH private key (~/.ssh/id_ed25519 or $env:USERPROFILE\.ssh\id_ed25519). These actions access sensitive local files and network endpoints. While these actions are expected for a deploy, the skill did not declare or ask for these sensitive artifacts and gives the agent explicit commands that could be used to exfiltrate data or make privileged changes on a remote host.
Install Mechanism
No install spec and no code files — the skill is instruction-only, which minimizes disk persistence risk. There is no package download or archive extraction to review.
Credentials
The skill declares no required environment variables or config paths, but its instructions rely on several environment-dependent items and binaries: the user's SSH private key file, Windows USERPROFILE environment, the local build path, and external commands (mvn, ssh, scp, tail, netstat, awk). Declaring none of these is inconsistent: the skill implicitly requires access to sensitive credentials (SSH key) and local filesystem paths without listing them or justifying why the agent should access them.
Persistence & Privilege
The skill does not request permanent 'always' inclusion and has no install steps. It is user-invocable and may be invoked autonomously when trigger phrases are seen; combined with the sensitive actions in the instructions (using the user's SSH key and connecting to a root account), that autonomous invocation increases risk if the skill is triggered unexpectedly. On its own the persistence settings are not excessive.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install hxd-deploy
  3. After installation, invoke the skill by name or use /hxd-deploy
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
hxd-deploy 1.0.0 – Initial release - Provides an automated tool for deploying the 霍小钉 Spring Boot service to a remote server. - Supports Maven packaging, JAR file upload, old version backup with timestamp, and service restart via SSH. - Validates key steps including JAR existence, SSH connectivity, and deployment success. - Comprehensive error handling and troubleshooting for common deployment issues. - Includes output instructions for reporting status and logs after deployment. - Offers guidance on backup management, log checks, and rapid rollback procedures.
Metadata
Slug hxd-deploy
Version 1.0.0
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is Hxd Deploy?

部署霍小钉服务到服务器。自动上传 JAR 文件、备份旧版本、重启服务。 It is an AI Agent Skill for Claude Code / OpenClaw, with 102 downloads so far.

How do I install Hxd Deploy?

Run "/install hxd-deploy" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Hxd Deploy free?

Yes, Hxd Deploy is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Hxd Deploy support?

Hxd Deploy is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Hxd Deploy?

It is built and maintained by xiaodouzi (@adtomato); the current version is v1.0.0.

💬 Comments