← 返回 Skills 市场
solarspiker

Appian Deploy

作者 solarspiker · GitHub ↗ · v1.2.3 · MIT-0
cross-platform ⚠ suspicious
148
总下载
0
收藏
0
当前安装
5
版本数
在 OpenClaw 中安装
/install appian-deploy
功能描述
Deploy (import) an Appian package ZIP into an Appian environment. Use when the user wants to push, import, or deploy a package file to an Appian environment.
使用说明 (SKILL.md)

Appian Deploy

Imports a package ZIP into the Appian environment using the v2 Deployment Management API. Polls until a terminal status and prints a full object summary.

Usage

node {baseDir}/scripts/index.js \x3CzipPath> \x3CdeploymentName> [description] [customizationFilePath]

Example

node {baseDir}/scripts/index.js "./appian-exports/MyPackage.zip" "Prod Release 1.2"

Exported packages are saved to ./appian-exports/ by appian-export.

Run appian-inspectpkg first to validate before deploying. If the environment requires approval, the deployment will return PENDING_REVIEW — check Appian Designer's Deploy view to approve.

External endpoints

  • POST ${APPIAN_BASE_URL}/deployments — triggers the import
  • GET ${APPIAN_BASE_URL}/deployments/{uuid} — polls for completion

Security

  • Credentials (APPIAN_BASE_URL, APPIAN_API_KEY) are read from environment variables (injected by OpenClaw at runtime). If not injected, the script falls back to a appian.json file in the current working directory.
  • The package ZIP is uploaded only to your configured Appian environment.
  • No data is sent to any third-party service.
  • No shell commands are executed; all operations use Node.js built-in APIs.
安全使用建议
This skill appears to do what it says: it uploads a ZIP to your Appian environment using the provided APPIAN_BASE_URL and APPIAN_API_KEY. Before installing, note two small issues: (1) the script requires Node.js to run but the skill metadata doesn't list Node as a required binary — ensure your environment provides Node; (2) if APPIAN_BASE_URL/APPIAN_API_KEY aren't injected, the script searches up to 5 parent directories for an appian.json and will load any uppercase KEY=VALUE pairs it finds into process.env (this can import unrelated secrets/config into the process). Also be aware that the script prints payload metadata (deployment JSON and file size) to stdout/stderr, which may appear in agent logs. If those behaviors are acceptable for your environment, the skill is coherent and proportionate to its stated purpose.
功能分析
Type: OpenClaw Skill Name: appian-deploy Version: 1.2.3 The skill is a legitimate utility for deploying Appian packages using the official Appian Deployment Management API. The code in `scripts/index.js` follows the logic described in `SKILL.md`, using standard Node.js APIs to read local ZIP files and perform authenticated HTTP requests to a user-defined Appian environment. No evidence of data exfiltration to third parties, shell command execution, or malicious prompt injection was found.
能力标签
requires-sensitive-credentials
能力评估
ℹ Purpose & Capability
Name/description, required env vars (APPIAN_BASE_URL, APPIAN_API_KEY), and the script's network calls all align with deploying a package to Appian. Minor mismatch: the SKILL declares no required binaries but the runtime usage requires Node (the script is invoked with `node`).
ℹ Instruction Scope
SKILL.md and the script limit network activity to the configured APPIAN_BASE_URL endpoints and describe uploading only the supplied package/customization file. However, the script will search up to 5 parent directories for an `appian.json` and load any uppercase KEY=VALUE entries it finds into process.env (not just the two Appian vars). Also the script logs payload metadata (deployment JSON and file size) to stdout/stderr which could surface sensitive info in logs.
ℹ Install Mechanism
No install spec is provided (instruction-only), which keeps risk low. The package includes a Node.js script (no packaged/install step). This implies the environment must provide Node.js; the skill did not declare a required binary but the script is intended to be run with `node`.
⚠ Credentials
Declared env requirements (APPIAN_BASE_URL, APPIAN_API_KEY) are appropriate for the task. But the fallback `appian.json` loader will parse and set any uppercase KEY=VALUE pairs into process.env if they are present and not already set. That behavior can unexpectedly import additional environment values from a config file located in parent directories (search depth 5). Consider whether you want a skill to automatically load arbitrary env entries from nearby files.
✓ Persistence & Privilege
The skill does not request persistent/always-on privileges. It does not modify other skills or system-wide settings. Autonomous invocation is allowed by platform default but is not combined with other high-risk features here.
如何使用
  1. 确保已安装 OpenClaw（本地或 Docker 部署）
  2. 在对话框中输入安装命令：/install appian-deploy
  3. 安装完成后，直接呼叫该 Skill 的名称或使用 /appian-deploy 触发
  4. 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.2.3
- Internal code changes made to scripts/index.js; no user-facing changes. - Functionality and documentation remain the same.
v1.2.2
- No code or documentation changes in this version. - Version bump to 1.2.2; behavior and usage remain the same.
v1.2.1
Version 1.2.1 of appian-deploy - No changes in code or documentation detected. - Maintenance release with no new features or bug fixes.
v1.2.0
- Added support for loading credentials (`APPIAN_BASE_URL`, `APPIAN_API_KEY`) from a local `appian.json` config file if environment variables are not set. - Updated usage docs and examples to reflect preferred package export location (`./appian-exports/`). - Clarified credential handling and fallback mechanism in the documentation.
v1.0.0
Initial release of appian-deploy skill. - Deploys (imports) an Appian package ZIP file to a specified Appian environment using API v2. - Polls deployment status until completion or review is required. - Requires APPIAN_BASE_URL and APPIAN_API_KEY environment variables for authentication. - All uploads are secure; no external data transfers or shell execution. - Detailed usage and security information included in documentation.
元数据
Slug appian-deploy
版本 1.2.3
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 5
常见问题

Appian Deploy 是什么？

Deploy (import) an Appian package ZIP into an Appian environment. Use when the user wants to push, import, or deploy a package file to an Appian environment. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 148 次。

如何安装 Appian Deploy？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install appian-deploy」即可一键安装，无需额外配置。

Appian Deploy 是免费的吗？

是的，Appian Deploy 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

Appian Deploy 支持哪些平台？

Appian Deploy 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Appian Deploy？

由 solarspiker（@solarspiker）开发并维护，当前版本 v1.2.3。

推荐 Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191113 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 留言讨论