← Back to Skills Marketplace
samueli

one-click dev and dploy

by PlayWithAI · GitHub ↗ · v1.0.0 · MIT-0
darwinlinuxwin32 ⚠ suspicious
198
Downloads
1
Stars
0
Active Installs
5
Versions
Install in OpenClaw
/install dev-deploy
Description
快速创建并部署 Web 应用到 Cloudflare Pages;包含文件覆盖、Git推送与系统修改的安全确认机制。
README (SKILL.md)

Dev & Deploy Skill

快速开发并部署 Web 应用到 Cloudflare Pages,可选推送到 GitHub。

目标与范围

  • 创建项目(基础页面 / 自定义 / 复用已有目录)
  • 可选创建并推送 GitHub 仓库
  • 可选部署到 Cloudflare Pages
  • 访问测试与基础重试

AI 执行原则与安全限制(重要)

为避免破坏性行为和数据丢失,Agent 在执行此工作流时必须遵守以下确认流程,严禁在未获明确授权时进行高危自动化操作

  1. 执行计划确认:在调用 deploy.js 之前,必须简要向用户说明将要执行的参数和动作,并征得用户同意。
  2. 项目名称 (--name) 必填:脚本强制要求提供 --name 参数。如果用户未提供,Agent 必须先向用户询问,不能随意编造或假定项目名称。
  3. 覆盖与文件修改:如果目标目录已存在,或使用了 --in-place--source 可能导致现有文件被覆盖,必须先向用户发出明确警告并获取授权。
  4. 远程推送与创建仓库:在进行 Git 提交、推送远程仓库或使用 GitHub CLI 创建仓库前,必须征求用户同意。若未经明确同意,必须加上 --skip-github
  5. 部署权限:需要部署但未设置 CLOUDFLARE_API_TOKEN 时,必须暂停并请求用户提供或由用户执行授权。
  6. 重要安全限制:需要使用 brewnpm install -g 安装全局依赖(如 gh, wrangler)时,必须先向用户申请权限,禁止在未授权时悄悄篡改系统环境。

失败恢复策略

  1. 读取错误信息并定位缺失项(依赖、登录、权限、参数)。
  2. 自动补齐后立即重试原命令。
  3. 连续失败时给出“最小下一步动作”,再请求用户输入。

前置检查与自动补齐

按需检查(不是所有命令都必须执行):

node -v
git --version
gh --version
wrangler --version
gh auth status
wrangler whoami

安装指引(缺什么装什么,但在执行系统级安装前必须征求用户同意):

# macOS
brew install node
brew install git
brew install gh
npm install -g wrangler

Cloudflare Token 指引(部署时必看)

  • Token 管理页:\x3Chttps://dash.cloudflare.com/profile/api-tokens>
  • 官方文档:\x3Chttps://developers.cloudflare.com/fundamentals/api/get-started/create-token/>

快速步骤:

  1. 打开 Token 管理页,点击 Create Token
  2. 选择可用于 Pages/Wrangler 部署的模板(如 Edit Cloudflare Workers),或自定义最小权限。
  3. 资源范围限制到目标账号。
  4. 创建后复制 token(通常只显示一次)。
  5. 在当前终端注入:
export CLOUDFLARE_API_TOKEN=your_token_here

注意:在脚本、CI、AI Agent 等非交互环境中,即使执行过 wrangler login,也仍可能需要 CLOUDFLARE_API_TOKEN

使用方法

1) 自定义开发

node dev_deploy/deploy.js --name my-app --custom

2) 部署已有项目(复制到默认目录)

node dev_deploy/deploy.js --name my-app --source ./existing-project

3) 原地部署已有项目

node dev_deploy/deploy.js --name my-app --source ./existing-project --in-place

参数说明

参数 说明 示例
--name 项目名称(必填,小写字母/数字/短横线) todo-app
--custom 自定义开发模式 -
--source 已有项目目录 ./my-project
--in-place 原地部署(不复制) -
--projects-dir 默认项目目录 ~/projects
--config 配置文件路径 ~/.config/dev-deploy/config.json
--branch Git 分支名 main
--public 创建公开仓库(默认私有) -
--skip-test 跳过访问测试 -
--skip-github 跳过 GitHub 创建和推送 -
--skip-deploy 跳过 Cloudflare 部署 -

配置优先级

命令行参数 > 环境变量 > 配置文件 > 默认值

环境变量:

export CLOUDFLARE_API_TOKEN=your_token_here
export PROJECTS_DIR=~/projects
export TEST_DELAY=5000
export MAX_RETRIES=3
export DEFAULT_DOMAIN=pages.dev
export DEFAULT_BRANCH=main
export PAGES_BUILD_OUTPUT_DIR=.
export DEV_DEPLOY_CONFIG=~/.config/dev-deploy/config.json

配置文件默认路径(取首个存在的):

  • ~/.config/dev-deploy/config.json
  • ~/.dev-deploy.json

标准执行流程(AI 必须严格遵循安全确认)

  1. 解析目标与参数:识别是否需要 GitHub / Cloudflare,明确必要的参数(如 --name)。
  2. 计划确认:向用户展示计划执行的命令及可能产生的文件/环境变更,等待用户授权。
  3. 环境检查与授权依赖安装:在征得同意的前提下,安装缺失的依赖。
  4. 执行 deploy.js:根据授权的参数执行脚本。
  5. 异常处理:失败则按报错提示用户或在授权范围内重试。
  6. 返回结果:输出本地路径、线上 URL 及后续的未完成项(若有)。

常见错误 -> 立即动作

  • wrangler: command not found -> npm install -g wrangler
  • gh: command not found -> brew install gh(或跳过 GitHub)
  • non-interactive environment ... CLOUDFLARE_API_TOKEN -> 注入 CLOUDFLARE_API_TOKEN 后重试
  • gh auth status 失败 -> gh auth login 后重试
  • 访问测试失败 -> 增大 TEST_DELAYMAX_RETRIES
Usage Guidance
This skill appears to do what it says (create and deploy projects to Cloudflare Pages) and requires node/git/gh/wrangler and a Cloudflare token — that is expected. However, before installing or running it: - Review deploy.js yourself (or have someone you trust review it). The script uses execSync/execFileSync and fs.cpSync with force: true; if run without confirmations it can overwrite files and run git pushes. - Ensure the agent or person invoking the skill will actually prompt for and obtain explicit user consent before any 'in-place' operations, installs (brew/npm -g), repo creation, or git push. The SKILL.md mandates this, but the platform/agent must enforce it. - Provide a Cloudflare API token with least privilege and scoped to the intended account/zone; treat the token as sensitive. - Back up any directories that could be targeted (projectsDir or source) before use. - Prefer running the script manually (interactive terminal) the first time in a sandbox or throwaway environment to observe behavior. If you want a higher assurance verdict, provide the full (untruncated) deploy.js for a line-by-line review and confirm how your agent enforces the SKILL.md confirmation steps.
Capability Analysis
Type: OpenClaw Skill Name: dev-deploy Version: 1.0.0 The dev-deploy skill is a legitimate utility designed to automate the creation and deployment of Web applications to Cloudflare Pages and GitHub. The deploy.js script uses standard system commands (git, gh, wrangler) to perform its tasks and includes proper input sanitization for project names. The SKILL.md file contains robust safety instructions, explicitly requiring the AI agent to obtain user consent before installing dependencies, overwriting files, or pushing to remote repositories.
Capability Assessment
Purpose & Capability
Name/description, required binaries (node, git, gh, wrangler), and required env (CLOUDFLARE_API_TOKEN) align with a Cloudflare Pages + GitHub deployment tool. The included deploy.js and SKILL.md implement deployment workflows expected for this purpose.
Instruction Scope
SKILL.md contains explicit safety rules (ask before destructive actions) which is good, but it also instructs the agent to read many configuration environment variables and files (PROJECTS_DIR, DEV_DEPLOY_CONFIG, ~/.config/dev-deploy/config.json, ~/.dev-deploy.json, etc.). The instructions permit running system-level installers (brew, npm -g) if authorized. The agent-level enforcement of the confirmation steps is not guaranteed by the skill itself — the script uses shell execution and forceful file copy that can overwrite user files if run without the promised confirmations.
Install Mechanism
This is an instruction-only skill with no install spec; that is lowest risk for installation mechanics. No remote downloads or package installs are automatic. The code file executes local commands (execSync/execFileSync), which is expected for deployment tooling.
Credentials
The declared required env var is only CLOUDFLARE_API_TOKEN which is appropriate. However, SKILL.md and deploy.js reference multiple other environment variables and config file paths (PROJECTS_DIR, DEV_DEPLOY_CONFIG, TEST_DELAY, MAX_RETRIES, etc.) that are not listed in requires.env — these appear to be non-secret configuration values, but their use should be noted. The skill does not request unrelated secrets (no AWS keys, etc.).
Persistence & Privilege
always:false and default autonomous invocation are standard. The skill writes project files under a projects directory and may create/modify repositories and push to remotes — these are within expected scope for a deploy tool but are high-impact operations that depend on user authorization steps described in SKILL.md.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install dev-deploy
  3. After installation, invoke the skill by name or use /dev-deploy
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
No changes detected since the previous version. - Initial release of Dev & Deploy (version 1.0.0).
v1.4.0
No code or documentation changes detected in this release. Version bump from 1.3.0 to 1.4.0 only.
v1.3.0
**Version 1.3.0 – 强化流程安全与操作确认** - 新增执行计划和高危操作前向用户确认机制,确保项目覆盖、系统依赖安装、远程推送等敏感操作均获授权。 - 强制校验必填参数(如 `--name`),禁止 AI 或 Agent 自行假定项目名。 - 明确区分环境依赖检查和授权依赖安装两阶段,避免未授权系统修改。 - 推送、部署等需用户明示授权,未获同意将自动跳过相关操作。 - 更新流程说明和异常处理策略,提升效率与风险防控。
v1.2.0
- 增加了安全限制:在安装全局依赖(如 gh、wrangler)前,必须获得用户明确授权,禁止未授权时自动修改系统环境。 - 在执行系统级安装(如 brew install, npm install -g)前要征求用户同意。 - metadata 补充了 wrangler 依赖和 CLOUDFLARE_API_TOKEN 环境变量的声明。 - 文档明确标注用户授权要求,增强了依赖安装过程的安全性和透明度。
v1.1.0
Version 1.1.0 - 更新描述和用法说明,详细展示自动化流程、AI执行原则与错误恢复策略。 - 明确列出所有支持的命令参数及其优先级。 - 新增和完善 Cloudflare Token 获取与注入指导。 - 丰富常见安装指令及错误应对方案。 - 优化交互体验:默认自动全流程,仅特定场景才主动澄清用户需求。
Metadata
Slug dev-deploy
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 5
Frequently Asked Questions

What is one-click dev and dploy?

快速创建并部署 Web 应用到 Cloudflare Pages;包含文件覆盖、Git推送与系统修改的安全确认机制。 It is an AI Agent Skill for Claude Code / OpenClaw, with 198 downloads so far.

How do I install one-click dev and dploy?

Run "/install dev-deploy" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is one-click dev and dploy free?

Yes, one-click dev and dploy is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does one-click dev and dploy support?

one-click dev and dploy is cross-platform and runs anywhere OpenClaw / Claude Code is available (darwin, linux, win32).

Who created one-click dev and dploy?

It is built and maintained by PlayWithAI (@samueli); the current version is v1.0.0.

💬 Comments