← Back to Skills Marketplace
lyx058019

Openclaw Deploy

by MicRabbit · GitHub ↗ · v1.2.1 · MIT-0
cross-platform ⚠ suspicious
117
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install lyx-openclaw-deploy
Description
一键打包和部署 OpenClaw 环境到任意服务器。自动移除敏感信息、支持本地/远程/批量部署、冲突处理、SHA256 完整性校验、详细日志与故障排查指南。适用于 OpenClaw 环境迁移、批量部署、团队标准化。
README (SKILL.md)

OpenClaw Deploy - 一键打包部署

功能

  1. 打包配置:基础 / 完整 / 自定义打包,自动移除敏感信息
  2. 镜像管理:查看信息、SHA256 校验、版本管理
  3. 本地部署:一键还原部署、环境预检、4种冲突处理策略
  4. 远程部署:SSH 远程单台部署
  5. 批量部署:多主机并行部署,支持主机清单(V1.2 新增)
  6. 运维辅助:详细日志、故障排查指南(V1.2 新增)

快速开始

git clone https://github.com/lyx058019/openclaw-deploy.git
cd openclaw-deploy

# 打包
./build/full/full_builder.sh --output ./openclaw.tar.gz

# 本地部署
./build/full/full_builder.sh --package ./openclaw.tar.gz --install-dir ~/.openclaw

# 批量部署(多主机)
./deploy/batch/batch_deploy.sh \
  --inventory ./config/inventory.example.ini \
  --package ./openclaw.tar.gz \
  --parallel 4

批量部署示例

复制主机清单模板:

cp config/inventory.example.ini config/inventory.ini
# 编辑 inventory.ini 填入真实主机信息

清单格式(Ansible 兼容):

[production]
web01 ansible_host=192.168.1.101 ansible_user=ubuntu
web02 ansible_host=192.168.1.102 ansible_user=ubuntu

[staging]
stage01 ansible_host=192.168.1.201 ansible_user=root

执行批量部署:

./deploy/batch/batch_deploy.sh \
  --inventory config/inventory.ini \
  --package ./openclaw.tar.gz \
  --parallel 8 \
  --mode backup

服务器要求

项目 最低要求
系统 Ubuntu 20.04+ / CentOS 7+ / macOS
Docker 20.10+
内存 ≥ 4GB
CPU ≥ 2 核

安全说明

  • ✅ 导出时自动移除敏感信息(apiKey、token 等)
  • ✅ SHA256 完整性校验
  • ✅ SSH 加密传输
  • ⚠️ 部署后手动填入 API Keys
Usage Guidance
This skill appears to be a legitimate deploy/pack tool, but be cautious: it reads and packages files from ~/.openclaw (workspace, memory, skills) and only sanitizes a narrow set of keys in openclaw.json. Before installing or running: (1) inspect the cloned repository (https://github.com/lyx058019/openclaw-deploy) yourself; (2) run the scripts in a disposable VM or container first; (3) review what will be included in a package (check the TEMP_DIR contents or run in dry-run/test mode); (4) ensure sensitive files (secrets, .env, memory, skills with embedded tokens) are removed or excluded prior to packaging or use the custom builder --no-workspace/--no-skills options; (5) verify SHA256 files before trusting downloaded packages and prefer local packages you built yourself; (6) be aware the scripts may call external installers (get.docker.com) and will perform remote SSH operations if used with inventory — verify inventory and SSH behavior carefully. If you need the claimed 'automatic sensitive removal' guarantee, ask the maintainer for exact sanitization rules or extend the scripts to scrub additional file types before use.
Capability Analysis
Type: OpenClaw Skill Name: lyx-openclaw-deploy Version: 1.2.1 The OpenClaw AgentSkills bundle is a comprehensive deployment and packaging toolkit for OpenClaw environments. It includes robust scripts for local, remote, and batch deployment via SSH/SCP, as well as Docker integration. A significant security feature is the inclusion of Python-based sanitization logic in `build/base/base_builder.sh` and `build/custom/custom_builder.sh` that explicitly removes sensitive keys (e.g., api_key, token, password) before packaging. While the tool utilizes high-privilege operations such as remote command execution and a 'curl|bash' pattern for Docker installation in `build/full/full_builder.sh`, these behaviors are strictly aligned with its stated purpose and include safety measures like `safe_path` checks to prevent accidental filesystem damage. No evidence of malicious intent, data exfiltration, or prompt injection was found.
Capability Assessment
Purpose & Capability
Name/description (one‑click package & deploy) align with required binaries (bash/tar/ssh) and the provided scripts (build/, deploy/, batch/). The repo clone URL and included scripts correspond to deployment functionality.
Instruction Scope
The SKILL.md and scripts will read from the user's HOME (~/.openclaw), copying workspace, memory, and skills into the package. The code only sanitizes a limited set of keys in openclaw.json; other files (workspace files, memory directory, skill code, .env files, or any other artifacts) are copied without broad scrubbing. That contradicts the SKILL.md claim of '自动移除敏感信息' (automatic removal of sensitive info) and could lead to unintended disclosure if the package is shared or uploaded.
Install Mechanism
No unusual install mechanism in registry metadata; SKILL.md's metadata instructs cloning from a GitHub repository (a common release host). The scripts do invoke standard external installers (e.g., get.docker.com) and use curl to fetch remote installers, which is expected for an automated deploy tool but is a standard-risk action that should be reviewed before running.
Credentials
The skill declares no required env vars, but scripts will read local paths (~/.openclaw, SSH keys referenced by inventory, $HOME/.ssh/known_hosts) and will use optional env (DEPLOY_URL) if present. Packaging and deployment actions access many user-local artifacts (workspace, memory, skills) that may contain credentials or PII; requiring no explicit credential inputs makes it easy to accidentally package and exfiltrate sensitive data. The sanitization scope is narrow (only specific keys in openclaw.json).
Persistence & Privilege
The skill does not request always:true, does not modify other skills' configs, and its install is instruction-only/clone-based. It will create or overwrite ~/.openclaw when installing packages, which is consistent with its function but should be noted by the user.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install lyx-openclaw-deploy
  3. After installation, invoke the skill by name or use /lyx-openclaw-deploy
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.2.1
fix: 修复PROJECT_DIR路径计算错误、ansible字段解析逻辑、macOS bash 3.2兼容性问题;新增--test离线验证模式
v1.2.0
V1.2: 批量部署+运维辅助
v1.0.0
First release - packaging, local/remote deployment, SHA256 verification, Docker support
Metadata
Slug lyx-openclaw-deploy
Version 1.2.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is Openclaw Deploy?

一键打包和部署 OpenClaw 环境到任意服务器。自动移除敏感信息、支持本地/远程/批量部署、冲突处理、SHA256 完整性校验、详细日志与故障排查指南。适用于 OpenClaw 环境迁移、批量部署、团队标准化。 It is an AI Agent Skill for Claude Code / OpenClaw, with 117 downloads so far.

How do I install Openclaw Deploy?

Run "/install lyx-openclaw-deploy" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Openclaw Deploy free?

Yes, Openclaw Deploy is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Openclaw Deploy support?

Openclaw Deploy is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Openclaw Deploy?

It is built and maintained by MicRabbit (@lyx058019); the current version is v1.2.1.

💬 Comments