← Back to Skills Marketplace
215
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install tidepool
Description
Build and deploy any kind of web app without leaving the command line. This project is built for autonomous AI agents. Handles auth, Stripe payments, admin p...
Usage Guidance
This skill appears to do what it says (a CLI web app deployer) but it installs a third‑party Python package and performs network operations. Before installing: (1) verify the tidepool package/source (homepage, PyPI owner, repository) to ensure authenticity; (2) avoid pasting real production secrets into prompts — use test keys or inject secrets via your secure secret store rather than terminal history; (3) treat the install as running untrusted code (consider installing in an isolated environment or container); (4) review what will be stored under tp_data/ (secrets.json, db) and do not place system or cloud credentials there; (5) expect the CLI to make outbound HTTP requests (the curl to tidepool.sh/api and tp.http calls) — if you need an offline/sandboxed review, fetch the package source first and inspect it.
Capability Analysis
Type: OpenClaw Skill
Name: tidepool
Version: 1.0.1
The skill provides a deployment platform for AI agents via the 'tidepool' CLI and service (tidepool.sh). It contains a high-risk instruction in SKILL.md directing the agent to fetch and process an external API reference (curl https://tidepool.sh/api), which serves as a vector for indirect prompt injection. While the capabilities (secret management, remote code execution/deployment, and database synchronization) are aligned with the stated purpose of a PaaS, the reliance on remote instructions and the handling of sensitive credentials like Stripe keys make it a high-risk tool for autonomous agents.
Capability Assessment
Purpose & Capability
The skill declares and requires the 'tidepool' CLI and its SKILL.md shows CLI usage (pip install tidepool, tidepool init/dev/deploy). There are no unrelated env vars, binaries, or config paths requested that would be inconsistent with a web-deploy CLI.
Instruction Scope
Runtime instructions include network calls (curl https://tidepool.sh/api), installing/running the tidepool CLI, and APIs (tp.http, tp.email, tp.files, tp.db) that allow outbound HTTP and reading project-local secrets at tp_data/secrets.json. These behaviors match a deploy tool but give the agent the ability to make arbitrary outbound requests and read project-local secret files — expected for this purpose but worth attention.
Install Mechanism
Install spec is an external package (uv/pip install tidepool) which is expected for a CLI tool. Installing a third-party Python package from a registry is normal but carries supply-chain risk — verify package provenance (PyPI name, owner, homepage, source) before installing.
Credentials
No required environment variables or system credentials are requested up-front. Payment features (Stripe) are documented but handled via explicit secret push or project secrets — this is proportionate as long as you do not expose unrelated credentials to the skill.
Persistence & Privilege
The skill is not marked always:true and does not request system-wide config changes. Agent autonomous invocation is allowed (platform default) but not coupled with elevated persistent privileges in this package.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tidepool - After installation, invoke the skill by name or use
/tidepool - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Fix install kind: pip -> uv (supported by ClawHub)
v1.0.0
- Initial release of Tidepool: build and deploy web apps directly from the command line.
- Built-in support for authentication, Stripe payments, admin panels, email, database, file storage, custom domains, secrets, markdown, and real-time SSE.
- Minimalist workflow; deploy Python web apps in seconds with the Tidepool CLI and `tp.*` runtime API.
- Includes commands for fast setup, iteration, and deployment (quickstart, dev server, push/pull, secret management).
- Not intended for non-web tasks or general Python scripting.
Metadata
Frequently Asked Questions
What is Tidepool?
Build and deploy any kind of web app without leaving the command line. This project is built for autonomous AI agents. Handles auth, Stripe payments, admin p... It is an AI Agent Skill for Claude Code / OpenClaw, with 215 downloads so far.
How do I install Tidepool?
Run "/install tidepool" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Tidepool free?
Yes, Tidepool is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Tidepool support?
Tidepool is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Tidepool?
It is built and maintained by greydanus (@greydanus); the current version is v1.0.1.
More Skills