← 返回 Skills 市场
kryzl19

Git Deployer

作者 KRYZL19 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
116
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install git-deployer-kryzl19
功能描述
Push static site content to GitHub Pages repositories. Clone, copy files, commit with timestamp, force-push. Use when updating GitHub Pages sites, deploying...
使用说明 (SKILL.md)

git-deployer

Deploy static site content to GitHub Pages or any git-backed host.

When to Use

  • GitHub Pages updates — You have a local build/output directory and want to push it to a username.github.io repo or a Pages branch (gh-pages, main)
  • Static site deployment — Hugo, Jekyll, Gatsby, Docusaurus, or any static site with a git-hosted output
  • Automated CI replacement — Instead of setting up GitHub Actions, you want a one-command deploy from your machine
  • Syncing local → remote — You edit content locally and need to push changes to a hosted git repository

Workflow

Local Site Directory → /tmp/clone → File Copy → Commit → Force Push → Done
  1. Clone or init — If the remote repo exists, clone it to /tmp/{reponame}. Otherwise initialize a fresh clone
  2. Copy files — Sync your local site directory contents into the clone (clean copy, not append)
  3. Commit — Stage all files, commit with auto-generated timestamp message
  4. Force push — Push to remote with force flag to overwrite remote state
  5. Report — Output success/failure with commit hash and push result

Usage

Via skill invocation (from agent)

Provide the following arguments:

  • site_path — Absolute path to the local site directory (the content to deploy)
  • remote_url — Full git URL (e.g., https://github.com/user/repo.git or [email protected]:user/repo.git)
  • branch — Branch to deploy to (default: main)

Via script directly

./scripts/deploy.sh /path/to/site [email protected]:user/repo.git [branch]

Output

  • Success — Shows commit hash, remote URL, branch, and push status
  • Failure — Shows error message with exit code and which step failed

Requirements

  • git must be installed and configured with credentials for the remote
  • SSH key or HTTPS token auth must be set up for the remote repository
  • Site path must exist and contain files

Notes

  • Uses --force push — this will overwrite remote state. Use with caution on shared branches
  • Clone happens in /tmp and is not cleaned up automatically (intentional: allows inspection)
  • Commit message format: Deploy: YYYY-MM-DD HH:MM:SS UTC
安全使用建议
This skill appears to do what it claims, but review and consider the following before installing or running it: - Confirm you have git and rsync installed (the script uses rsync but SKILL.md only mentions git). - Be cautious: the script uses git --force to push, which will overwrite remote history on the target branch; prefer --force-with-lease or ensure you intend to replace remote state. - The script clones to /tmp/<repo_name> and does not delete that directory. On multi-user systems or shared machines this can leak site content or leave artifacts; consider modifying the script to use mktemp -d and perform cleanup after a successful deploy. - Because the /tmp directory is named from the repository basename, different repositories with the same name can collide; using a unique temp directory prevents accidental cross-repo contamination. - Review the contents of your site_path before running: any secrets present in the build output will be pushed to the remote. - If you want stricter safety: add validation of remote_url, require a pre-push confirmation step, and switch to safer push options. No malware indicators or unexpected external endpoints were found in the files provided. If you need higher assurance, request a version that: declares rsync in requirements, uses mktemp for the clone path, cleans up on exit, and uses safer push semantics.
功能分析
Type: OpenClaw Skill Name: git-deployer-kryzl19 Version: 1.0.0 The skill provides a functional git deployment script but contains vulnerabilities due to a lack of input sanitization. Specifically, in `scripts/deploy.sh`, the `REMOTE_URL` and `SITE_PATH` variables are passed directly to `git` and `rsync` commands without validation, which could allow for argument injection (e.g., passing strings starting with dashes to execute arbitrary git configurations). Additionally, the script uses a predictable and potentially shared directory in `/tmp` based on the repository's basename, which could lead to data leakage or collisions in multi-user environments.
能力评估
Purpose & Capability
Name/description match the included script and SKILL.md: the script clones a repo, copies site files, commits, and force-pushes. Required capabilities (git auth) are consistent with deploying to GitHub Pages or other git hosts.
Instruction Scope
Instructions and script stay within deployment scope, but the script uses rsync (not declared in SKILL.md requirements) and clones into /tmp without automatic cleanup. That can cause local-data retention and possible /tmp collisions across repos with the same basename.
Install Mechanism
No install spec (instruction-only plus a small shell script) — nothing is downloaded or installed by the skill itself.
Credentials
The skill requests no environment variables or credentials in metadata. It reasonably assumes git credentials or SSH keys are already configured locally. It does not attempt to read or exfiltrate other environment data.
Persistence & Privilege
Skill is not always-enabled and does not modify other skills or system configuration. It runs only when invoked and does not request elevated or persistent privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install git-deployer-kryzl19
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /git-deployer-kryzl19 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of git-deployer. - Push static site content to any git-based host, including GitHub Pages, in one command. - Automates cloning (or initializing), copying site files, committing with a timestamp, and force-pushing to the target branch. - Supports deploying from a local directory to a specified remote URL and branch. - Outputs clear success or failure messages with details on commit and push status. - Requires git credentials and authentication to be set up in advance. - Designed for quick, manual deployments without the complexity of CI setup.
元数据
Slug git-deployer-kryzl19
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Git Deployer 是什么?

Push static site content to GitHub Pages repositories. Clone, copy files, commit with timestamp, force-push. Use when updating GitHub Pages sites, deploying... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 116 次。

如何安装 Git Deployer?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install git-deployer-kryzl19」即可一键安装,无需额外配置。

Git Deployer 是免费的吗?

是的,Git Deployer 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Git Deployer 支持哪些平台?

Git Deployer 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Git Deployer?

由 KRYZL19(@kryzl19)开发并维护,当前版本 v1.0.0。

💬 留言讨论