← Back to Skills Marketplace
sky-lv

Openclaw Quick Deploy

by SKY-lv · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
49
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install openclaw-quick-deploy
Description
Deploy OpenClaw quickly to VPS, Docker, or local with auto environment detection, dependency installation, config generation, and service startup in 5-7 minu...
Usage Guidance
This skill appears to be a legitimate deployment helper but contains risky and sloppy elements you should verify before running anything. Do not run the curl | bash command blindly; instead fetch the script (curl -fsSL URL -o deploy.sh) and inspect it for unexpected behaviour (backdoors, data exfiltration, extra network calls). Confirm the Docker image name (the SKILL.md has a space — likely 'skylv/openclaw') and verify the image/author on Docker Hub. Note the deploy.sh has OS-detection but then uses apt-get unconditionally — it may fail or do the wrong thing on CentOS; run in a test VM or container first. Ensure you run installation commands with appropriate privileges (use sudo or run as root intentionally), and verify the npm package 'openclaw' is the official project before installing globally. If you have sensitive data on the host, prefer manual inspection or a controlled sandboxed environment rather than one‑line remote installs.
Capability Analysis
Type: OpenClaw Skill Name: openclaw-quick-deploy Version: 1.0.0 The skill 'openclaw-quick-deploy' (SKILL.md) promotes high-risk deployment practices, specifically a 'curl | bash' execution pattern targeting a personal GitHub repository (SKY-lv/awesome-openclaw-skills) and the use of a non-official Docker image (skylv/openclaw). While the embedded 'deploy.sh' script logic appears functionally aligned with its stated purpose, the instruction for an AI agent to execute unverified remote payloads and pull third-party containers for system-level installation presents a significant security risk and a potential vector for supply chain compromise.
Capability Assessment
Purpose & Capability
The name/description match the instructions: steps for deploying OpenClaw to VPS/Docker/local are present and use expected tools (git, npm, docker). Minor inconsistencies exist: SKILL.md metadata (slug/version/author) differs from registry metadata; a Docker image name contains a likely typo ('sky lv/openclaw' with a space) and some links point to third-party repos (SKY-lv). These differences are not evidence of malicious intent but do not fully align with tidy packaging.
Instruction Scope
Instructions include running a remote script via curl | bash (raw.githubusercontent.com) and commands that read/modify system paths (e.g., /etc/*, ~/.openclaw, /root/.openclaw). The deploy script's OS detection is inconsistent with later commands (it detects /etc/redhat-release for CentOS but then uses apt-get unconditionally), and the script assumes privilege level (runs apt-get and global npm installs) without using sudo. While these actions are within the general scope of a deploy helper, executing remote scripts and the privilege assumptions are risky and should be reviewed.
Install Mechanism
This is an instruction-only skill (no install spec), which limits direct disk writes from the skill bundle. However the recommended 'one-click' install is a curl https://raw.githubusercontent.com/... | bash pattern — running code fetched from a remote raw URL is high risk because it executes unverified code on the host. Pulling a Docker image is expected, but the image name in docs appears malformed; verify the correct image (likely skylv/openclaw).
Credentials
The skill declares no required environment variables or credentials, which is proportionate for a deploy helper. The runtime instructions do require network access and likely root privileges for package installation and service enablement; these are reasonable for a deploy workflow but users should be aware that the script will modify system packages, install global npm packages, and write configuration under home/root directories.
Persistence & Privilege
The skill does not request 'always' presence, does not modify other skills, and only suggests enabling the OpenClaw gateway service (system autostart) which is expected behavior for a deployment. Autonomous invocation is allowed by platform default but not in itself a concern here.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install openclaw-quick-deploy
  3. After installation, invoke the skill by name or use /openclaw-quick-deploy
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of OpenClaw Quick Deploy. - Enables one-click deployment of OpenClaw to VPS, Docker, or local environments in under 5 minutes. - Automatically detects system environment and installs dependencies. - Generates ready-to-use configurations for supported platforms: Ubuntu, Debian, CentOS, Docker, macOS, and Windows (WSL2). - Provides troubleshooting steps and deployment scripts for smooth setup. - Supports flexible triggers: "openclaw deploy", "install openclaw", "openclaw setup".
Metadata
Slug openclaw-quick-deploy
Version 1.0.0
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is Openclaw Quick Deploy?

Deploy OpenClaw quickly to VPS, Docker, or local with auto environment detection, dependency installation, config generation, and service startup in 5-7 minu... It is an AI Agent Skill for Claude Code / OpenClaw, with 49 downloads so far.

How do I install Openclaw Quick Deploy?

Run "/install openclaw-quick-deploy" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Openclaw Quick Deploy free?

Yes, Openclaw Quick Deploy is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Openclaw Quick Deploy support?

Openclaw Quick Deploy is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Openclaw Quick Deploy?

It is built and maintained by SKY-lv (@sky-lv); the current version is v1.0.0.

💬 Comments