← Back to Skills Marketplace
quincygunter

Appdeploy

by QuincyGunter · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
65
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install qui-appdeploy
Description
Deploy web apps with backend APIs, database, file storage, AI operations, authentication, realtime, and cron jobs. Use when the user asks to deploy or publis...
Usage Guidance
This skill will send your app files and deployment requests to https://api.heybossai.com and requires a SKILLBOSS_API_KEY — but the registry metadata did not declare that secret. Before installing or invoking it: (1) verify the vendor and service (SkillBoss / heybossai.com) and confirm you trust them with your code and any embedded secrets; (2) do not provide sensitive credentials or keys in files you upload; (3) prefer providing a scoped API key with minimal permissions and rotate it after use; (4) consider restricting the agent's ability to run arbitrary Bash commands if you want to limit local file access; and (5) ask the skill author why the manifest omits the required SKILLBOSS_API_KEY and request a published homepage or docs. If you cannot verify the provider, treat this skill as untrusted and avoid supplying real app data or secrets.
Capability Analysis
Type: OpenClaw Skill Name: qui-appdeploy Version: 1.0.0 The qui-appdeploy skill bundle provides a comprehensive set of tools for deploying and managing web applications via the SkillBoss API Hub (api.heybossai.com). It utilizes Bash/curl to interact with a remote API, requiring a SKILLBOSS_API_KEY for authentication. The tools (e.g., deploy_app, src_read, get_app_status) are well-defined and align with the stated purpose of application deployment, lifecycle management, and remote source inspection without any evidence of malicious intent or unauthorized data exfiltration.
Capability Tags
cryptocan-make-purchasesrequires-sensitive-credentials
Capability Assessment
Purpose & Capability
The SKILL.md behavior (deploy via SkillBoss API Hub) matches the declared purpose (deploy web apps), but the skill metadata in the registry omits the SKILLBOSS_API_KEY environment requirement that the instructions explicitly require. That incoherence (manifest vs runtime instructions) is unexpected and unexplained.
Instruction Scope
The instructions are detailed and scoped to calling the external SkillBoss API to upload templates/files, check status, and manage apps. They do not explicitly instruct reading unrelated host files or credentials, but they allow use of the Bash tool (arbitrary shell capability) and will accept files to upload — which could include sensitive files if the agent supplies them. The instruction to call a remote API and upload files is within the claimed purpose but gives a third party access to user project contents.
Install Mechanism
This is an instruction-only skill with no install spec and no code files besides SKILL.md and LICENSE, so there is no installer or downloaded artifact to review — lower install risk.
Credentials
SKILL.md requires SKILLBOSS_API_KEY (a secret) for all deployment calls, but the registry metadata listed no required env vars or primary credential. Requesting an external API key is appropriate for a deployment service, but failing to declare it in the skill manifest is a transparency problem and increases risk (users may not realize they must provide a secret to a third-party).
Persistence & Privilege
The skill is not configured as always:true and does not request system config paths or other skills' credentials. Autonomous invocation is allowed (platform default) but not combined with other high privileges in this skill.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install qui-appdeploy
  3. After installation, invoke the skill by name or use /qui-appdeploy
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the AppDeploy skill for deploying web apps via SkillBoss API Hub. - Deploy web apps with backend APIs, database, file storage, AI operations, authentication, realtime, and cron jobs. - Includes tools for deploying apps, getting deployment instructions and templates, checking status, version control, code search, and reading source files. - Requires SKILLBOSS_API_KEY environment variable for authentication. - Uses curl to interact with the SkillBoss API. - Designed for users who want an easy way to deploy or publish websites and web apps with a public URL.
Metadata
Slug qui-appdeploy
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Appdeploy?

Deploy web apps with backend APIs, database, file storage, AI operations, authentication, realtime, and cron jobs. Use when the user asks to deploy or publis... It is an AI Agent Skill for Claude Code / OpenClaw, with 65 downloads so far.

How do I install Appdeploy?

Run "/install qui-appdeploy" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Appdeploy free?

Yes, Appdeploy is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Appdeploy support?

Appdeploy is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Appdeploy?

It is built and maintained by QuincyGunter (@quincygunter); the current version is v1.0.0.

💬 Comments