← Back to Skills Marketplace
352
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install soilrich-ops
Description
Manage Soil Rich by John — website updates, blog/social content, ISDA compliance, orders, FFA programs. Notion-powered.
Usage Guidance
This skill appears to do what it says (manage website, Notion content, compliance data), but the SKILL.md expects access to local repos, an iCloud Documents folder, and external APIs (Notion, Netlify) while the registry declares no required credentials or paths. Before installing, ask the author to: (1) explicitly list required environment variables (e.g., NOTION_TOKEN, NETLIFY_AUTH_TOKEN, repo SSH key) and any config paths, (2) explain why the iCloud Documents path is needed and restrict file access to only the necessary files, (3) confirm which commands will be run and whether deployments require explicit user approval (ensure deploys cannot happen without explicit consent), and (4) provide the 'site-deployer' skill’s identity and behavior (since deploys are delegated). If you cannot get clear answers, avoid granting the skill access to your website repo, iCloud folders, or API tokens. Consider running it in a sandbox or giving it read-only test data/credentials first.
Capability Analysis
Type: OpenClaw Skill
Name: soilrich-ops
Version: 1.0.0
The skill is classified as suspicious due to the potential for shell injection vulnerabilities. The `soil site update` command takes user-controlled `[page]` and `[content]` arguments, which are then used to modify files in `~/soilrich-website/` and commit changes via `git`. If these inputs are not rigorously sanitized by the agent before being passed to shell commands, an attacker could inject arbitrary commands. While the skill's stated purpose is benign, this vulnerability, combined with the broad `git` and `npm` command permissions, presents a significant risk of unauthorized code execution within the agent's environment.
Capability Assessment
Purpose & Capability
The skill's purpose (website updates, Notion-driven content, compliance, orders, FFA) aligns with the instructions (editing a local website repo, reading Notion DBs, deploying to Netlify). However the metadata/registry listing declares no required binaries, env vars, or config paths while the SKILL.md explicitly lists file access to ~/soilrich-website and an iCloud path and network access to api.notion.com and api.netlify.com and commands git/npm/netlify. That mismatch between claimed requirements and actual runtime needs is incoherent and should be resolved before use.
Instruction Scope
The SKILL.md instructs the agent to modify files in ~/soilrich-website, read label files in an iCloud Documents path, commit changes with git, run npm/netlify-related deployments, and read multiple Notion databases. It also says it can 'search the web' for FFA events but only lists api.notion.com/api.netlify.com as network targets. These instructions reference user-local files and external services beyond what the registry declared and grant broad discretion to access and change local content (website repo and label files).
Install Mechanism
This is an instruction-only skill with no install spec and no code files, which lowers supply-chain risk because nothing is downloaded or written by an installer. The main runtime risk comes from the actions the agent will be instructed to take (file edits, network calls).
Credentials
The SKILL.md requires access to Notion and Netlify APIs and local repositories, but the skill registry lists no required environment variables or primary credential. Expected credentials (e.g., NOTION_TOKEN, NOTION_INTEGRATION, NETLIFY_AUTH_TOKEN, or repository access tokens/SSH keys) are missing from the declared requirements. The skill also references an iCloud Documents path which could contain other sensitive files; no justification or limits are declared. Missing declarations impede user consent and least-privilege review.
Persistence & Privilege
always is false (good). The skill will modify local files and commit/deploy when invoked and may be able to run commands like git/npm/netlify; autonomous invocation is allowed by default but not flagged here. There's no indication it requests permanent system-wide changes or modifies other skills' configs. Still, the skill's ability to edit local repo files and access iCloud-stored documents is a non-trivial privilege the user should explicitly authorize.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install soilrich-ops - After installation, invoke the skill by name or use
/soilrich-ops - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of soilrich-ops — manage Soil Rich by John operations from your phone.
- Update and deploy website content via Next.js/Netlify.
- Draft blog and social posts, saved directly to Notion.
- Look up product ISDA compliance and label requirements.
- Track orders and customer information from Notion Orders database.
- Manage FFA program info, sponsorships, and events.
- All actions integrated with Notion-powered databases and file access.
Metadata
Frequently Asked Questions
What is Soil Rich Ops?
Manage Soil Rich by John — website updates, blog/social content, ISDA compliance, orders, FFA programs. Notion-powered. It is an AI Agent Skill for Claude Code / OpenClaw, with 352 downloads so far.
How do I install Soil Rich Ops?
Run "/install soilrich-ops" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Soil Rich Ops free?
Yes, Soil Rich Ops is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Soil Rich Ops support?
Soil Rich Ops is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Soil Rich Ops?
It is built and maintained by Martin (@martc03); the current version is v1.0.0.
More Skills