← Back to Skills Marketplace
VoteShip
by
Matt Kilmer
· GitHub ↗
· v0.2.0
272
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install voteship
Description
Manage feature requests, votes, roadmaps, and changelogs with VoteShip.
Usage Guidance
This skill appears internally consistent with a VoteShip integration, but exercise caution before installing and supplying VOTESHIP_API_KEY: 1) Confirm the npm package (@voteship/mcp-server) exists on a trusted registry (npmjs.org), review its publisher, recent release history, and package contents (bin scripts). 2) Verify the service homepage/docs (https://voteship.app/docs) and that the package maps to the official project. 3) Only provide an API key scoped to the minimal project and rotate it after testing; avoid giving long‑lived global keys when a project‑scoped key is possible. 4) Review any webhook endpoints you configure and monitor audit logs for unexpected activity. If you cannot verify the npm package publisher or the service origin, treat installation as higher risk.
Capability Analysis
Type: OpenClaw Skill
Name: voteship
Version: 0.2.0
The 'voteship' skill is a legitimate integration for the VoteShip platform, designed to manage feature requests, roadmaps, and changelogs. It utilizes a standard MCP server (@voteship/mcp-server) and requires expected environment variables (VOTESHIP_API_KEY) for administrative tasks. The documentation in SKILL.md describes standard SaaS functionality, including AI-assisted triage and analytics, with no evidence of malicious intent, data exfiltration, or prompt injection vulnerabilities.
Capability Assessment
Purpose & Capability
Name, description, and required environment variables (VOTESHIP_API_KEY, VOTESHIP_PROJECT_SLUG) align with a feature‑request / board management integration. The declared node package (@voteship/mcp-server) that provides a voteship-mcp binary is consistent with a CLI helper for the service.
Instruction Scope
SKILL.md contains only VoteShip-related actions (listing/creating/updating posts, votes, tags, webhooks, analytics, AI triage) and references the two declared env vars. It does not instruct the agent to read unrelated system files, arbitrary environment variables, or exfiltrate data to third‑party endpoints beyond configuring webhooks (which is a documented VoteShip feature).
Install Mechanism
The install uses an npm package (@voteship/mcp-server) which is an expected distribution method for a Node CLI, but npm installs are moderate risk because they introduce third‑party code onto the system. No direct URL downloads or archives are used (good). Verify the package publisher and contents before installing.
Credentials
Only two env vars are required, which matches the skill's purpose. However, the VOTESHIP_API_KEY is a high‑privilege credential (admin access according to the docs) that grants full project control (create/delete posts, configure webhooks, update users, sync MRR). Requesting this single key is proportionate to admin functionality but carries elevated risk if misused.
Persistence & Privilege
The skill does not request always:true and does not ask to modify other skills or system configs. It will install a binary via npm (own artifact) but does not require persistent platform privileges beyond normal installation.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install voteship - After installation, invoke the skill by name or use
/voteship - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.2.0
Fix security scan issues: remove npx from required bins, declare VOTESHIP_PROJECT_SLUG in env, clarify admin vs public mode split, clarify Stripe sync uses same API key with no extra credentials, scope privileged operations.
v0.1.5
Initial release — feature requests, votes, roadmaps, changelogs, AI triage, and public board tools.
Metadata
Frequently Asked Questions
What is VoteShip?
Manage feature requests, votes, roadmaps, and changelogs with VoteShip. It is an AI Agent Skill for Claude Code / OpenClaw, with 272 downloads so far.
How do I install VoteShip?
Run "/install voteship" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is VoteShip free?
Yes, VoteShip is completely free (open-source). You can download, install and use it at no cost.
Which platforms does VoteShip support?
VoteShip is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created VoteShip?
It is built and maintained by Matt Kilmer (@mattkilmer); the current version is v0.2.0.
More Skills