← Back to Skills Marketplace
137
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install resolved-sh-rstack
Description
The operator skill suite for the agentic web. Helps resolved.sh operators maximize their presence and build a successful agent-native business: audit page qu...
Usage Guidance
This skill appears to be a legitimate operator toolkit for resolved.sh, but the registry metadata incorrectly omits the environment variables the SKILL.md files require. Before installing: (1) verify the skill's source (the registry lists 'unknown'); prefer the official resolved.sh GitHub if available; (2) do not provide a high-privilege API key — create a least-privileged/rescoped key or test account if possible; (3) prefer to copy-paste the generated curl commands and run them yourself instead of letting the agent execute them autonomously; (4) confirm that you are comfortable the skill will read RESOLVED_SH_API_KEY, RESOLVED_SH_RESOURCE_ID, and RESOLVED_SH_SUBDOMAIN and may send them to resolved.sh endpoints; (5) ask the publisher to correct the registry metadata to list the required env vars so the permissions are explicit. If you want to be cautious, run the skill in an environment that can be audited or where you can rotate the API key after testing.
Capability Analysis
Type: OpenClaw Skill
Name: resolved-sh-rstack
Version: 1.0.2
The rstack skill bundle is a legitimate suite of tools designed for operators on the resolved.sh platform. It provides automated workflows for auditing page health, generating A2A agent cards, managing data marketplace listings, and registering paid service endpoints. The scripts (e.g., rstack-audit/SKILL.md, rstack-services/SKILL.md) use standard utilities like curl and python3 to interact with the official resolved.sh API and include security best practices such as SSRF validation for user-provided URLs. No evidence of malicious intent, data exfiltration, or unauthorized execution was found.
Capability Assessment
Purpose & Capability
The SKILL.md files uniformly require a resolved.sh subdomain, API key, and resource ID to fetch and update listings (curl calls to https://{subdomain}.resolved.sh and PUT /listing/{id}). Those credentials are exactly what the skills need for the stated purpose. However, the registry-level Requirements block provided to the scanner lists 'Required env vars: none' and 'Primary credential: none' — this is an internal inconsistency that could mislead installers about what secrets the skill needs.
Instruction Scope
The runtime instructions perform network calls (curl) to resolved.sh endpoints, parse results with inline python, generate copy-pasteable curl commands (including full PUT commands that embed the API key), and offer to run those commands if the operator confirms. All of this is consistent with a page/content/audit tool, but it does mean the agent will (when given the env vars) be able to perform live updates to your resolved.sh listing and call external registries (smithery, skills.sh, etc.). Confirm-before-run flows are present (AskUserQuestion), which reduces risk if you verify interactions before execution.
Install Mechanism
Instruction-only skill (no install spec, no code files beyond SKILL.md text). This is low-risk from an install/write-to-disk perspective since nothing is downloaded or executed at install time.
Credentials
The environment variables used across the SKILL.md files are RESOLVED_SH_API_KEY, RESOLVED_SH_RESOURCE_ID, and RESOLVED_SH_SUBDOMAIN — all proportional to the skill's function. The concern is that the registry listing claims no required env vars or primary credential, yet the skill repeatedly instructs reading/using the API key and resource ID. That mismatch could cause an operator to install the skill without realizing it requires an API key (sensitive credential).
Persistence & Privilege
always is false and there is no install-time persistence requested. The skill can invoke actions at runtime (default model invocation allowed). Because the skill can generate and optionally execute PUT/PATCH commands that include your API key, allow-listing or running it autonomously increases blast radius — prefer manual confirmation before running update operations.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install resolved-sh-rstack - After installation, invoke the skill by name or use
/resolved-sh-rstack - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
Version 1.0.2 of resolved-sh-rstack
- No file changes detected in this release.
- Functionality and documentation remain unchanged from the previous version.
v1.0.1
Significant update expanding skillset and monetization support:
- Added new subskills: `/rstack-services` (register paid APIs) and `/rstack-content` (publish monetized content)
- Expanded skill descriptions to include supporting service endpoints, blog posts, courses, and paywalled sections
- `/rstack-audit` now checks 7 areas, including services and monetized content
- Updated quick start and use case examples to reflect new monetization and publishing capabilities
v1.0.0
rstack 1.0.0 initial release
- Introduces a suite of tools to help resolved.sh operators audit and improve their web presence.
- Includes skills for page quality review, agent card creation, data product optimization, and multi-registry distribution.
- Provides a full health check with scorecard via /rstack-audit and actionable, artifact-producing outputs.
- Designed for quick setup and iterative improvement of resolved.sh listings.
Metadata
Frequently Asked Questions
What is resolved-sh-rstack?
The operator skill suite for the agentic web. Helps resolved.sh operators maximize their presence and build a successful agent-native business: audit page qu... It is an AI Agent Skill for Claude Code / OpenClaw, with 137 downloads so far.
How do I install resolved-sh-rstack?
Run "/install resolved-sh-rstack" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is resolved-sh-rstack free?
Yes, resolved-sh-rstack is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does resolved-sh-rstack support?
resolved-sh-rstack is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created resolved-sh-rstack?
It is built and maintained by hichana (@hichana); the current version is v1.0.2.
More Skills