← Back to Skills Marketplace
appdeploy
by
TobeyRebecca
· GitHub ↗
· v1.0.2
· MIT-0
116
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install toby-appdeploy
Description
Deploy web apps with backend APIs, database, file storage, AI operations, authentication, realtime, and cron jobs. Use when the user asks to deploy or publis...
Usage Guidance
Before installing: verify the skill's source (repo or homepage) and the operator behind 'SkillBoss' and confirm you trust https://api.skillboss.co. Expect the skill to read your project files and upload them to that API — do not use it with repositories that contain secrets, private keys, or credentials unless you audit what will be sent. Resolve the metadata mismatch (registry shows no required env vars but SKILL.md requires SKILLBOSS_API_KEY). Ask the publisher for a privacy/security page or code repository, and ask how they filter sensitive files (.env, config, keys) during deploy. If you proceed, restrict the SKILLBOSS_API_KEY to a least-privilege credential and test with a non-sensitive sample project first.
Capability Tags
Capability Assessment
Purpose & Capability
SKILL.md describes an app deployment skill that uses the SkillBoss API and requires SKILLBOSS_API_KEY — that is coherent with the name/description. However the registry metadata earlier reported 'Required env vars: none' and 'Primary credential: none', which contradicts SKILL.md. There is no homepage or source URL listed, which reduces provenance and increases the need for verification.
Instruction Scope
The runtime instructions tell the agent to call an external API (https://api.skillboss.co) and to provide app files, diffs, and to use tools such as src_glob (discover file paths) and deploy_app (send files). Sending project files and diffs to a third-party endpoint is expected for a deployer but is also data-exfiltration vector for secrets (API keys, private config). The SKILL.md does not clearly limit which paths must not be sent or provide safeguards to avoid leaking sensitive files (e.g., .env, config, private keys). There are also odd internal constraints (e.g., 'DO NOT display the version value to users') that are unusual and not explained.
Install Mechanism
This is an instruction-only skill with no install spec or code files to execute locally. That minimizes disk-write risk; the main runtime risk is network calls to the remote API described in SKILL.md.
Credentials
SKILL.md declares a required environment variable SKILLBOSS_API_KEY which is proportionate for authenticating to api.skillboss.co. However, the registry metadata contradicts this by listing no required env vars — the mismatch is an inconsistency that should be resolved. No other credentials are requested.
Persistence & Privilege
The skill is not always-enabled and is user-invocable; it does not request elevated, always-on presence or system config changes. Autonomous invocation is allowed by default but not an additional red flag here by itself.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install toby-appdeploy - After installation, invoke the skill by name or use
/toby-appdeploy - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
Version 1.0.2 of the toby-appdeploy skill
- No file changes detected in this release.
- Functionality, usage, and documentation remain unchanged from the previous version.
v1.0.1
- Updated API base URL from api.heybossai.com to api.skillboss.co throughout documentation and usage examples.
- No functional changes to skill tools or logic. Documentation only.
v1.0.0
Initial release of appdeploy skill for deploying web apps via SkillBoss API Hub.
- Deploy web apps with backend APIs, databases, file storage, authentication, realtime features, and cron jobs.
- Provides tools for deploying, updating, deleting, and managing apps, with support for source browsing and versioning.
- Publishes deployed sites to a public URL using HTTP API calls via curl.
- Requires SKILLBOSS_API_KEY environment variable for authentication.
- Includes detailed usage workflow and setup instructions.
Metadata
Frequently Asked Questions
What is appdeploy?
Deploy web apps with backend APIs, database, file storage, AI operations, authentication, realtime, and cron jobs. Use when the user asks to deploy or publis... It is an AI Agent Skill for Claude Code / OpenClaw, with 116 downloads so far.
How do I install appdeploy?
Run "/install toby-appdeploy" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is appdeploy free?
Yes, appdeploy is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does appdeploy support?
appdeploy is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created appdeploy?
It is built and maintained by TobeyRebecca (@tobeyrebecca); the current version is v1.0.2.
More Skills