← Back to Skills Marketplace
PinMe Deploy
by
yz6214589-hash
· GitHub ↗
· v1.0.0
· MIT-0
111
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pinme-deploy
Description
一键部署前端静态网站到 IPFS 网络。使用场景:(1) 用户需要部署静态网站、HTML页面、前端项目 (2) 用户提到pinme、IPFS部署、静态网站托管 (3) 用户需要快速预览或分享前端作品 (4) 用户要求发布、上传、部署静态页面。支持自动识别项目类型、构建并上传到 IPFS 网络,返回可访问的 URL。
Usage Guidance
This skill looks like a legitimate Pinata-based deployer but has a few red flags you should consider before installing: (1) SKILL.md runs npm install / npm run build but the skill does not declare npm/node as required — ensure your environment has Node/npm or the commands will fail. (2) Features like ENS binding and team sharing imply additional credentials (wallet/private key, team tokens) that are not requested; ask the author how those are implemented and what extra permissions are needed. (3) The deploy process will read and upload files from the project path — double-check you run it only in the intended directory to avoid accidentally uploading sensitive files. (4) Only provide PINATA_API_KEY and PINATA_SECRET_KEY if you trust the skill; consider using scoped/limited Pinata credentials and testing in an isolated environment or container first. If you need higher assurance, request source code or an explicit list of commands the agent will run and verification that no other external endpoints are contacted.
Capability Analysis
Type: OpenClaw Skill
Name: pinme-deploy
Version: 1.0.0
The pinme-deploy skill is a utility designed to help an AI agent deploy static websites to the IPFS network using the Pinata pinning service. The SKILL.md file provides clear instructions for project detection, building (via npm), and uploading files using the legitimate Pinata API endpoint (api.pinata.cloud). While the execution of 'npm install' and 'npm run build' carries inherent risks common to development tools, the skill's logic is transparent, aligned with its stated purpose, and lacks any indicators of malicious intent, data exfiltration, or unauthorized access.
Capability Tags
Capability Assessment
Purpose & Capability
The skill's primary goal—uploading static sites to IPFS via Pinata—matches the required PINATA_API_KEY and PINATA_SECRET_KEY and the curl-based upload in SKILL.md. However, several advertised capabilities (ENS binding, team sharing, deployment statistics, incremental updates) either require other services/credentials (e.g., an Ethereum wallet or ENS write authority) or additional APIs that are not declared. Also the SKILL.md instructs npm install/npm run build but the declared required binaries list does not include npm/node, which is a direct mismatch.
Instruction Scope
The runtime instructions tell the agent to list directories, run npm install and npm run build, and upload local build files to Pinata using curl. Those actions inherently read arbitrary files under the specified project path and transmit files to an external service (Pinata). This is expected for a deployer, but it grants the skill broad access to local filesystem contents — the instructions do not define safeguards or limit which files to include, raising risk of accidental exfiltration if run on the wrong path.
Install Mechanism
No install spec and no code files are present (instruction-only), so nothing is downloaded or written during install. This reduces installation risk.
Credentials
The skill requests only PINATA_API_KEY and PINATA_SECRET_KEY, which are appropriate for Pinata uploads. That is proportionate. However, advertised features (ENS, team sharing) would normally require other credentials (wallet/private key, team service tokens) that are not requested—this is an unexplained capability mismatch. Also SKILL.md expects npm/node to be available but these are not listed in required binaries.
Persistence & Privilege
always:false and no config paths requested. The skill does not request permanent platform-level presence or modify other skills' configs. Autonomous invocation is allowed (default) but not combined with 'always:true' or broad undeclared credential access.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pinme-deploy - After installation, invoke the skill by name or use
/pinme-deploy - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
init
Metadata
Frequently Asked Questions
What is PinMe Deploy?
一键部署前端静态网站到 IPFS 网络。使用场景:(1) 用户需要部署静态网站、HTML页面、前端项目 (2) 用户提到pinme、IPFS部署、静态网站托管 (3) 用户需要快速预览或分享前端作品 (4) 用户要求发布、上传、部署静态页面。支持自动识别项目类型、构建并上传到 IPFS 网络,返回可访问的 URL。 It is an AI Agent Skill for Claude Code / OpenClaw, with 111 downloads so far.
How do I install PinMe Deploy?
Run "/install pinme-deploy" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is PinMe Deploy free?
Yes, PinMe Deploy is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does PinMe Deploy support?
PinMe Deploy is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created PinMe Deploy?
It is built and maintained by yz6214589-hash (@yz6214589-hash); the current version is v1.0.0.
More Skills