← Back to Skills Marketplace
dannyshmueli

Jits Builder

by Danny Shmueli · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1958
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install jits-builder
Description
Instantly build, deploy, and access single-page, vanilla JS mini-apps from voice or text descriptions via a Cloudflare tunnel URL.
README (SKILL.md)

JITS Builder - Just-In-Time Software 🚀

Build instant mini-apps from voice or text descriptions. Describe what you need, get a working tool deployed in seconds.

What is JITS?

Just-In-Time Software - the idea that you don't need to find or install tools. You describe what you need and it gets built on the spot.

"I need a timer that plays a sound after 25 minutes" "Make me a tool to split a bill between friends"
"Create a page where I can paste JSON and see it formatted"

Requirements

  • Cloudflared binary (auto-downloads to /tmp/cloudflared if missing)
  • Node.js (for serving the app)

How It Works

  1. Describe - Voice or text, explain what you want
  2. Generate - Agent builds a single-file HTML/JS/CSS app
  3. Deploy - Cloudflare tunnel makes it instantly accessible
  4. Use - Get a URL, use your tool, share it

Usage

Just ask naturally:

"Build me a pomodoro timer"
"I need a quick tool to convert CSV to JSON"
"Make a tip calculator"
"Create a color palette generator"

The agent will:

  1. Generate the HTML/JS code
  2. Save to /data/clawd/jits-apps/\x3Cname>.html
  3. Serve on a local port
  4. Create Cloudflare tunnel
  5. Return the public URL

Managing JITS Apps

# List running apps
/data/clawd/skills/jits-builder/jits.sh list

# Stop an app
/data/clawd/skills/jits-builder/jits.sh stop \x3Cname>

App Guidelines

When building JITS apps:

  1. Single file - All HTML, CSS, JS in one file
  2. No dependencies - Use vanilla JS, no external libraries
  3. Mobile-friendly - Responsive design
  4. Dark theme - Looks good, easy on eyes
  5. Self-contained - No backend/API calls needed
  6. Branded - Include "Built with JITS" badge

Template Structure

\x3C!DOCTYPE html>
\x3Chtml lang="en">
\x3Chead>
  \x3Cmeta charset="UTF-8">
  \x3Cmeta name="viewport" content="width=device-width, initial-scale=1.0">
  \x3Ctitle>🚀 JITS - [App Name]\x3C/title>
  \x3Cstyle>
    /* Dark theme, centered layout */
    body {
      font-family: -apple-system, sans-serif;
      background: linear-gradient(135deg, #1a1a2e, #16213e);
      min-height: 100vh;
      display: flex;
      align-items: center;
      justify-content: center;
      color: white;
    }
    /* ... app styles ... */
  \x3C/style>
\x3C/head>
\x3Cbody>
  \x3Cdiv class="container">
    \x3Ch1>[App Title]\x3C/h1>
    \x3Cdiv class="badge">Built with JITS\x3C/div>
    \x3C!-- App content -->
  \x3C/div>
  \x3Cscript>
    // App logic
  \x3C/script>
\x3C/body>
\x3C/html>

Example Apps

App Description
Pomodoro Timer 25/5 min work/break cycles with sound
Tip Calculator Split bills with custom tip %
JSON Formatter Paste JSON, see it pretty-printed
Color Picker Generate and copy color palettes
Countdown Timer to a specific date/event
QR Generator Text to QR code
Unit Converter Length, weight, temperature
Decision Maker Random picker for choices

Limitations

  • Single-page only - No multi-page apps
  • No backend - Client-side only, no databases
  • Temporary URLs - Tunnels expire when stopped
  • No persistence - Data doesn't survive refresh (use localStorage if needed)

Directory Structure

/data/clawd/jits-apps/
├── pomodoro.html      # App HTML
├── pomodoro.pid       # Server process ID
├── pomodoro.port      # Port number
├── pomodoro.url       # Tunnel URL
└── pomodoro.tunnel.pid # Tunnel process ID

"The best tool is the one you build exactly when you need it." 🐱🦞

Usage Guidance
This skill's goal (quickly build and publish single-file apps) is plausible, but it performs risky runtime actions: auto-downloads a binary and creates public tunnels. Before installing or enabling it, review the jits.sh script content to see exactly what it downloads and from where, and verify package.json dependencies. Prefer running it in an isolated environment (container or sandbox). Require explicit Cloudflare credentials or a documented, trusted auth flow rather than implicit auto-downloading of cloudflared. If you will allow model-initiated runs, consider disabling autonomous invocation or restricting the skill so it cannot start tunnels without your explicit approval.
Capability Analysis
Type: OpenClaw Skill Name: jits-builder Version: 1.0.0 This skill is classified as suspicious due to its inherent high-risk capabilities, specifically the use of `cloudflared` in `jits.sh` to create public tunnels to `localhost` and the execution of agent-generated HTML/JS code via `node -e`. While these actions are central to the skill's stated purpose of deploying 'Just-In-Time Software,' they create a significant attack surface. A malicious prompt or compromised agent could lead to public exposure of sensitive local resources or execution of arbitrary code, even though the skill itself does not contain explicit instructions for data exfiltration or persistence. The `SKILL.md` also notes that `cloudflared` is 'auto-downloads' by the agent, which introduces a supply chain risk if the download source is not securely managed by the agent.
Capability Assessment
Purpose & Capability
The SKILL.md describes building single-file client apps and making them available via a Cloudflare tunnel, which legitimately requires Node.js (to serve) and a cloudflared binary (to create tunnels). However, the skill does not document how Cloudflare auth/certificates are provided or why no Cloudflare credentials or configuration are declared; that omission is inconsistent with the stated deployment goal.
Instruction Scope
Runtime instructions instruct the agent to save generated apps under /data/clawd/jits-apps/, start local servers, and create Cloudflare tunnels. They also state cloudflared will be auto-downloaded to /tmp if missing. Those runtime actions include network exposure and arbitrary binary download/execution and are broader than a simple code-generation helper — the SKILL.md does not limit or explain where the binary comes from or how tunnels are authenticated.
Install Mechanism
There is no formal install spec, but the skill claims it will auto-download the cloudflared binary at runtime. Auto-downloading and executing binaries at runtime is higher risk when the source/URL is not documented. package.json exists (implying Node usage) but there is no declared install step or vetted source list.
Credentials
No environment variables or credentials are declared despite the skill creating public tunnels; in practice cloudflared typically requires authentication (a cert or account linkage). The lack of declared credentials or guidance for how to securely supply them is a mismatch between required capabilities and declared requirements.
Persistence & Privilege
The skill is not marked always:true, but model invocation is not disabled. That means the agent could autonomously run the script, download a binary, start servers and tunnels, and publish URLs without additional gating. Combined with network-exposing behavior, this is a notable privilege to leave unconstrained.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install jits-builder
  3. After installation, invoke the skill by name or use /jits-builder
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of JITS Builder (Just-In-Time Software). - Instantly generate and deploy mini-apps from simple voice or text descriptions. - Apps are single-file, mobile-friendly, dark-themed, and require no external dependencies. - Automatic deployment with Cloudflare tunnel for instant public access. - Simple management with commands to list and stop active JITS apps. - Includes guidelines and template structure for consistent JITS app generation.
Metadata
Slug jits-builder
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Jits Builder?

Instantly build, deploy, and access single-page, vanilla JS mini-apps from voice or text descriptions via a Cloudflare tunnel URL. It is an AI Agent Skill for Claude Code / OpenClaw, with 1958 downloads so far.

How do I install Jits Builder?

Run "/install jits-builder" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Jits Builder free?

Yes, Jits Builder is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Jits Builder support?

Jits Builder is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Jits Builder?

It is built and maintained by Danny Shmueli (@dannyshmueli); the current version is v1.0.0.

💬 Comments