← Back to Skills Marketplace
sitemd
by
Tyler Berggren
· GitHub ↗
· v0.1.3
· MIT-0
159
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install sitemd
Description
Build and manage websites from Markdown. Create pages, generate content, configure settings, and deploy — all through MCP tools.
Usage Guidance
This skill mostly looks like what it says (site management from Markdown), but it instructs the agent to download and run a binary via an installer script that is not included or documented. Before installing or running this skill: 1) Ask the publisher for the exact install URL(s), release host (GitHub release, official domain), and checksum/signature for the binary; 2) Prefer providing an API key (SITEMD_TOKEN) with minimal scope over live magic-link flows for automation; 3) Do not run unknown installers on a production machine—test in an isolated environment or container first; 4) If you cannot obtain a verifiable install source and integrity information, treat the installer step as high risk and avoid running it; 5) Request the skill maintainer to include an explicit install spec (trusted URL, checksum) or provide source code you can audit.
Capability Analysis
Type: OpenClaw Skill
Name: sitemd
Version: 0.1.3
The skill instructions in SKILL.md require the agent to execute a bootstrap script (./sitemd/install) to download and run an external binary (./sitemd/sitemd), which is a high-risk pattern for supply chain attacks and remote code execution. Additionally, the tool includes a 'sitemd_clone' function and handles sensitive authentication via magic links and environment variables (SITEMD_TOKEN), which could be leveraged for phishing or credential theft if the underlying binary is compromised. While these features are plausibly related to website management, the lack of transparency in the installation process is a significant security concern.
Capability Tags
Capability Assessment
Purpose & Capability
Name/description align with the actions described in SKILL.md (creating pages, building, deploying). The declared primary credential SITEMD_TOKEN fits the claimed API-key-based automation. Minor mismatch: registry metadata lists no required binaries, yet the instructions expect a local ./sitemd/sitemd binary (or an ./sitemd/install script to fetch it). This could be legitimate (tool shipped per-project) but should be explained.
Instruction Scope
Instructions ask the agent to read project files (pages/, settings/, etc.) which is expected, and to perform auth via magic links (sitemd_auth_login + poll) which is plausible. However, the SKILL.md explicitly directs running an installer (./sitemd/install) to download a binary if none exists; the instructions give no source, checksum, or validation step. That step would let the skill fetch and execute arbitrary code at runtime and is out-of-band relative to the metadata provided.
Install Mechanism
There is no install spec in the registry (instruction-only), but the SKILL.md instructs running a bootstrap script to download a compiled binary. Because the skill package contains no code, the agent would need to fetch the installer/binary from the network at runtime; the SKILL.md does not specify trusted hosts, release URLs, or integrity checks. This is the highest-risk element of the skill.
Credentials
The only declared credential is SITEMD_TOKEN (primaryEnv), and the SKILL.md explains using either magic links or creating API keys for automation. No unrelated secrets or filesystem config paths are requested. The credential request appears proportionate to the advertised functionality.
Persistence & Privilege
always is false and the skill does not declare any system-wide persistence or modification of other skills. The skill can be invoked autonomously (default), which is normal; no privilege escalation or 'always' inclusion is requested.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install sitemd - After installation, invoke the skill by name or use
/sitemd - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.3
sitemd 0.1.3
- No code or documentation changes detected in this release.
- Version increment without file modifications.
v0.1.2
No changes detected in this version.
- Version 0.1.2 does not introduce any file or documentation updates.
v0.1.1
Version 0.1.1
- No file changes detected in this release.
- Functionality and documentation remain unchanged.
v0.1.0
Initial release of sitemd – build and manage Markdown-based websites using MCP tools.
- Create, manage, and deploy static websites entirely from Markdown files.
- Includes a suite of MCP tools for content creation, validation, deployment, SEO, and more.
- Supports email magic link logins and API key authentication.
- Flexible project structure with dedicated folders for content, configuration, themes, media, and output.
- Enhanced Markdown features: buttons, cards, embeds, galleries, tooltips, modals, forms, and more.
- Structured content types for pages, docs, blogs, changelogs, and roadmaps.
Metadata
Frequently Asked Questions
What is sitemd?
Build and manage websites from Markdown. Create pages, generate content, configure settings, and deploy — all through MCP tools. It is an AI Agent Skill for Claude Code / OpenClaw, with 159 downloads so far.
How do I install sitemd?
Run "/install sitemd" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is sitemd free?
Yes, sitemd is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does sitemd support?
sitemd is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created sitemd?
It is built and maintained by Tyler Berggren (@tyler-berggren); the current version is v0.1.3.
More Skills