← Back to Skills Marketplace
yourbro
by
Mike Afanasev
· GitHub ↗
· v0.0.11
· MIT-0
431
Downloads
1
Stars
0
Active Installs
5
Versions
Install in OpenClaw
/install yourbro
Description
Publish AI-powered web pages with end-to-end encryption on yourbro.ai
Usage Guidance
This skill appears to do what it says: it expects a local yourbro-agent binary and a yourbro API token and will publish pages by writing directories under /data/yourbro/pages/. Before installing, verify the following: 1) Confirm the download URLs and binary checksums/signatures (ask the vendor or prefer an OS package/repository or building from source) because running a downloaded native executable grants code execution on your machine. 2) Be comfortable with a background agent maintaining an outbound WebSocket to api.yourbro.ai (it must be online to serve pages). 3) Note the SKILL.md references YOURBRO_SERVER_URL even though the registry lists only YOURBRO_TOKEN — ensure you understand which env vars the agent will actually use. 4) Keep sensitive content out of public pages and verify sharing behavior (Google-account sharing and access codes) before using. If you need higher assurance, request vendor-signed releases, checksum verification, or source code to audit/build yourself.
Capability Analysis
Type: OpenClaw Skill
Name: yourbro
Version: 0.0.11
The skill downloads and executes external binaries (yourbro-agent) from yourbro.ai and requires an API token for outbound network communication, which are high-risk capabilities. It instructs the AI to manage files in a non-standard root-level directory (/data/yourbro/), which typically requires elevated privileges and may fail on standard configurations. Additionally, the documentation in SKILL.md suggests using postMessage with a wildcard origin ('*') for its storage API, a security vulnerability that could allow unauthorized cross-origin data access or manipulation.
Capability Assessment
Purpose & Capability
The skill is for publishing E2E-encrypted pages via a local agent. Requiring a yourbro-agent binary and a YOURBRO_TOKEN API token is consistent with that purpose; the file paths (/data/yourbro/pages/...) and pairing workflow match the description.
Instruction Scope
Runtime instructions explicitly tell the agent to create and write files under /data/yourbro/pages/{slug}/ and to run yourbro-agent and set YOURBRO_SERVER_URL. Writing files to that directory is expected for this skill, but SKILL.md references an additional env var (YOURBRO_SERVER_URL) that is not declared in the registry requires.env. No instructions direct the agent to read unrelated system files or exfiltrate data to third parties beyond yourbro.ai.
Install Mechanism
The SKILL.md includes download install entries that fetch architecture-specific executables directly from https://yourbro.ai/releases/latest/..., which is the vendor domain (not a widely-adopted release host like GitHub). Direct binary downloads are higher-risk than package-manager installs because they run native code on your machine; no checksums/signatures are provided in the instructions.
Credentials
Only one credential is required (YOURBRO_TOKEN) and it is declared as the primary credential. That matches the service's need for an API token. No unrelated secrets or multiple credential sets are requested.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It instructs how to run the agent as a background service (systemd/launchd), which is reasonable for a long-running local agent but does entail granting the downloaded binary persistent execution on the host.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install yourbro - After installation, invoke the skill by name or use
/yourbro - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.0.11
yourbro 0.0.11
- Documentation updated to clarify that OpenClaw, not ClawdBot, writes and manages page directories.
- Added support for "shared" page access: pages can now be shared with specific Google account emails using `allowed_emails`, with invitation secured by an `access_code`.
- Described access control levels: private (default), shared (email/code), and public.
- Included instructions for setting and managing access codes in `page.json`.
- All core usage, setup, and file structure remain unchanged.
v0.0.8
- Documentation updates for file/env setup and advanced deployment options.
- Custom domain publishing link instructions added to usage section.
v0.0.7
- Added support for public vs private pages; pages are private by default and can be made public by setting "public": true in page.json.
- Updated documentation to explain page visibility options and implications for access and encryption.
- Clarified that public pages are served unencrypted and are accessible without authentication, while private pages use end-to-end encryption and require authentication.
- Adjusted usage examples and instructions to reflect visibility controls using the "public" field.
v0.0.5
- Updated all example commands and documentation to use https://api.yourbro.ai as the API server URL instead of https://yourbro.ai.
- Clarified that YOURBRO_SERVER_URL should be set to https://api.yourbro.ai for agent configuration.
- Adjusted example WebSocket and API URLs to point to the new API domain.
- Minor documentation edits for consistency with the updated server address.
v0.0.4
- Initial release of yourbro skill for publishing AI-powered web pages with end-to-end encryption on yourbro.ai.
- Supports macOS (Intel & Apple Silicon) and Linux (x86_64 & ARM64) via platform-specific `yourbro-agent` binaries.
- Guides users through agent setup, pairing, and live publishing of web pages—no open ports, domains, or TLS required.
- All pages are served directly from local agent storage, encrypted end-to-end (X25519 + AES-256-GCM).
- Includes instructions for env configuration, live editing, deletion, and multi-file static sites.
- Pages are immediately live when files are created/updated, with easy shareable URLs.
Metadata
Frequently Asked Questions
What is yourbro?
Publish AI-powered web pages with end-to-end encryption on yourbro.ai. It is an AI Agent Skill for Claude Code / OpenClaw, with 431 downloads so far.
How do I install yourbro?
Run "/install yourbro" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is yourbro free?
Yes, yourbro is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does yourbro support?
yourbro is cross-platform and runs anywhere OpenClaw / Claude Code is available (darwin, linux).
Who created yourbro?
It is built and maintained by Mike Afanasev (@mehanig); the current version is v0.0.11.
More Skills