← Back to Skills Marketplace
fengzie

Standalone Setup

by fengzie · GitHub ↗ · v0.2.0 · MIT-0
cross-platform ⚠ suspicious
126
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install mobazha-standalone-setup
Description
Deploy a self-hosted Mobazha store on any Linux VPS using Docker. Use when the user wants to set up a standalone store on a server.
Usage Guidance
This skill appears coherent for installing a self-hosted Mobazha instance, but take these precautions before using it: (1) Do not hand over SSH credentials to anyone you don't fully trust — prefer to run the installer yourself over an SSH session you control. (2) Inspect the remote installer before executing: open https://get.mobazha.org/standalone in a browser or run curl -sSL https://get.mobazha.org/standalone | less to review the script. (3) Be aware the installer will generate API keys and contact app.mobazha.org by default — review /opt/mobazha/.env after install and change secrets as needed. (4) Consider running first on a disposable/staging VPS to observe outgoing connections and behavior (or run in an isolated network). (5) If you require greater assurance, ask the skill author for a reproducible, auditable release (e.g., GitHub release tarball or repository) instead of a single get.* script. (6) If you supply credentials to the agent, confirm the agent's stated policy that it will not persist or transmit them, but treat that as an honor system — prefer manual execution if you need guarantees.
Capability Analysis
Type: OpenClaw Skill Name: mobazha-standalone-setup Version: 0.2.0 The skill facilitates the deployment of software by executing a remote shell script with root privileges via a 'curl | bash' pattern (https://get.mobazha.org/standalone) on a user-provided VPS. While SKILL.md includes security warnings and guidelines for safe credential handling, the automated execution of unverified remote code and the creation of systemd persistence for auto-updates represent significant security risks inherent to the deployment method.
Capability Tags
requires-sensitive-credentials
Capability Assessment
Purpose & Capability
The name/description (deploy a Mobazha store on a Linux VPS using Docker) matches the instructions: SSH to the VPS, run an installer script, install Docker, place files under /opt/mobazha, and create management tooling. Required credentials (SSH access) are appropriate and the skill does not request unrelated secrets.
Instruction Scope
Instructions explicitly tell the agent to SSH to a user-provided VPS and run a remote installer via curl | sudo bash. They also describe generating an API key and configuring auto-updates/systemd. The instructions do not ask the agent to read unrelated local files or to exfiltrate credentials, but they do direct execution of a remote script and expect network calls to external services (e.g., default SaaS API URL), which is beyond the agent's local scope and warrants user review.
Install Mechanism
This is instruction-only (no install spec), but the core install step pipes a script from https://get.mobazha.org into sudo bash. While common for installers, this is a high-risk pattern because arbitrary code is downloaded and executed. The URL is project-specific (not a general package registry); the skill itself warns to inspect the script first. Users should verify the script's contents and TLS identity before running.
Credentials
The skill only requests SSH credentials (IP + password/key), which is proportionate to remote VPS administration. However the installer references an external SaaS endpoint (default https://app.mobazha.org) and will generate/store API keys in /opt/mobazha/.env. That external communication and generated credentials are part of the product behavior and should be considered when trusting the service.
Persistence & Privilege
The skill does not request elevated platform privileges (always:false) for the agent itself. The installer will create persistent artifacts on the target VPS (systemd timer, /usr/local/bin/mobazha-ctl, docker services, /opt/mobazha), which is expected for a host-level deployment but means the installed software will persist and may run background updates and network calls.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install mobazha-standalone-setup
  3. After installation, invoke the skill by name or use /mobazha-standalone-setup
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.2.0
Add credential declarations; require explicit user consent before SSH; strengthen credential safety
v0.1.0
Initial release
Metadata
Slug mobazha-standalone-setup
Version 0.2.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is Standalone Setup?

Deploy a self-hosted Mobazha store on any Linux VPS using Docker. Use when the user wants to set up a standalone store on a server. It is an AI Agent Skill for Claude Code / OpenClaw, with 126 downloads so far.

How do I install Standalone Setup?

Run "/install mobazha-standalone-setup" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Standalone Setup free?

Yes, Standalone Setup is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Standalone Setup support?

Standalone Setup is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Standalone Setup?

It is built and maintained by fengzie (@fengzie); the current version is v0.2.0.

💬 Comments