← 返回 Skills 市场
gxt-admin

Built at GrowthX

作者 gxt-admin · GitHub ↗ · v1.0.6
cross-platform ⚠ suspicious
431
总下载
0
收藏
0
当前安装
7
版本数
在 OpenClaw 中安装
/install growthx-bx-submit
功能描述
Submit your project to Built at GrowthX — the community builder showcase for GrowthX members. Requires a GrowthX API key.
使用说明 (SKILL.md)

Built at GrowthX — Project Submission

Submit a project to Built at GrowthX, the community builder showcase for GrowthX members.

When to Use

Activate this skill when the user wants to:

  • Push, submit, or share a project to Built at GrowthX
  • Post a project to the GrowthX builder showcase
  • Publish their build on GrowthX

Getting an API Key

If the user hasn't configured their API key yet, direct them to:

  1. Go to Built at GrowthX on the GrowthX platform
  2. Navigate to their profile / API key settings
  3. Click Generate API Key — the raw key is shown once, copy it immediately
  4. Set the key in OpenClaw config: add it under skills.entries.growthx-bx-submit.apiKey in ~/.openclaw/openclaw.json, or set the GROWTHX_API_KEY environment variable

The key is tied to the user's GrowthX membership. If their membership lapses, the key stops working.

API Endpoint

POST https://backend.growthx.club/api/v1/bx/projects/agent

Authentication

Send the API key in the x-api-key header:

x-api-key: \x3CGROWTHX_API_KEY>

Request Body (JSON)

Required fields:

Field Type Constraints
name string Max 100 characters. The project name.
tagline string Max 200 characters. A short one-liner about the project.

Optional fields:

Field Type Default Constraints
description string "" Max 2000 characters. Longer project description.
category string "SaaS" e.g. SaaS, Fintech, Marketplace, EdTech, HealthTech, AI/ML, Developer Tools, E-commerce
stack string[] [] Tech stack tags, e.g. ["React", "Node.js", "MongoDB"]
url string null Project URL (must be a valid URI)
status string "shipped" One of: shipped, idea, prototyping, beta
buildathon string null Name of a buildathon if this project was built during one

Example Request

curl -X POST "https://backend.growthx.club/api/v1/bx/projects/agent" \
  -H "Content-Type: application/json" \
  -H "x-api-key: $GROWTHX_API_KEY" \
  -d '{
    "name": "TaskFlow",
    "tagline": "AI-powered task management for remote teams",
    "description": "TaskFlow uses AI to automatically prioritize and assign tasks based on team capacity and deadlines.",
    "category": "SaaS",
    "stack": ["React", "Node.js", "OpenAI", "PostgreSQL"],
    "url": "https://taskflow.app",
    "status": "shipped"
  }' | jq .

Success Response (201)

{
  "project": {
    "_id": "...",
    "name": "TaskFlow",
    "tagline": "AI-powered task management for remote teams",
    "status": "shipped",
    "creator": { "name": "...", "avatar_url": "..." },
    "weighted_votes": 0,
    "raw_votes": 0
  }
}

Agent Behavior

When the user asks to submit a project, follow these steps in order:

Step 1 — Detect Projects in the Workspace

Scan standard project files in the current workspace to discover what the user has built. Only read these files:

Project manifest files:

  • package.jsonname, description, keywords, homepage, repository
  • pyproject.toml / setup.py / setup.cfgname, description, urls
  • Cargo.tomlname, description, repository, keywords
  • go.mod — module name
  • pubspec.yamlname, description, homepage

Documentation:

  • README.md — project title (first # heading) and opening paragraph
  • git remote -v — repository URL

Monorepo detection:

For monorepos, check for workspace configs (workspaces in root package.json, pnpm-workspace.yaml, turbo.json, nx.json) or subdirectories with their own manifest files. Each workspace package with its own name/description is a candidate project.

How to infer fields:

Field How to Infer
name name field from manifest file, or first heading in README
tagline description field from manifest, or first sentence of README
description Summarize from README content and manifest description (1-3 sentences)
stack Dependencies and devDependencies from manifest (e.g. react → "React", express → "Express", django → "Django")
url homepage field from manifest, or repository URL from git remote
category Infer from dependencies and README (e.g. stripe → "Fintech", next → "SaaS", ML libraries → "AI/ML")
status Default to "shipped". If README explicitly says WIP/prototype/beta, use that instead.

Step 2 — Present Discovered Projects

Show the user what you found. If multiple projects were detected (e.g. monorepo packages), list them and ask which one to submit:

I found these projects in your workspace:

  1. project-name — short description
  2. other-project — short description

Which one would you like to submit to Built at GrowthX?

If only one project is detected, present its details directly and ask to confirm.

Step 3 — Fill in Missing Details

For the selected project, show what was auto-detected and ask the user to fill in or correct anything:

  • name and tagline are required — if the tagline can't be inferred, ask for it
  • Show the auto-detected stack, category, url, description, and status and let the user adjust
  • Default status to "shipped" unless README or context suggests it's still in progress

Step 4 — Confirm and Submit

Show a final summary of all fields that will be sent:

Submitting to Built at GrowthX:

  • Name: TaskFlow
  • Tagline: AI-powered task management for remote teams
  • Category: SaaS
  • Stack: React, Node.js, OpenAI, PostgreSQL
  • URL: https://taskflow.app
  • Status: shipped

Submit this?

Only after the user confirms, make the API call using curl with the x-api-key header.

Step 5 — Report Result

On success, tell the user their project was submitted and share the project link if available. On failure, explain the error (see below).

Error Handling

Status Meaning What to Tell the User
401 Invalid or revoked API key "Your API key is invalid or has been revoked. Please generate a new one from the Built at GrowthX settings."
403 Membership not active "Your GrowthX membership is not active. An active membership is required to submit projects."
400 Validation error (missing name/tagline, field too long, etc.) Show the specific validation error from the response body.
安全使用建议
This skill appears to do what it says: it will read your project's manifest files and README and run 'git remote -v', then POST the collected fields to https://backend.growthx.club using the GROWTHX_API_KEY you provide. Before installing/using: (1) verify you trust GrowthX and that backend.growthx.club is the intended endpoint; (2) inspect your repo for any sensitive data in the listed files (package.json, README, manifest files) because those can be read and included in the submission; (3) prefer setting GROWTHX_API_KEY as an environment variable rather than writing it into ~/.openclaw/openclaw.json if you want fewer persistent copies, and know where to revoke the key if needed; (4) confirm the final submission summary the agent shows before it makes the POST request. Overall the skill is internally consistent and proportional to its purpose.
功能分析
Type: OpenClaw Skill Name: growthx-bx-submit Version: 1.0.6 The skill is classified as suspicious due to its explicit instructions for the AI agent to perform high-risk operations, even though they appear aligned with the stated purpose. Specifically, SKILL.md instructs the agent to read various local project files (e.g., `package.json`, `README.md`), execute the `git remote -v` command, and construct a `curl` command to an external API endpoint (backend.growthx.club) using data derived from these local files and user input. While these actions are necessary for the skill's functionality (submitting project details), the direct instruction to execute shell commands and read local files presents a significant vulnerability risk, particularly for potential shell injection if the agent's input sanitization is not robust, or for unintended data exposure if the file access instructions are misinterpreted by the agent.
能力评估
Purpose & Capability
Name/description, required binaries (curl, jq, git), and required env var (GROWTHX_API_KEY) are appropriate for a project-submit skill that inspects local manifests and posts to GrowthX's API.
Instruction Scope
SKILL.md explicitly instructs the agent to read a limited set of project files (package.json, pyproject, Cargo.toml, go.mod, pubspec.yaml, README.md) and to run 'git remote -v' to infer a repository URL. This is expected for auto-filling submission fields, but it does mean the agent will read repository metadata and README content — review those files for secrets before submitting.
Install Mechanism
No install steps or external downloads; instruction-only skill (no code written to disk). Lowest-risk install profile.
Credentials
Only requests a single service credential (GROWTHX_API_KEY) which is the declared primary credential and matches the documented authentication header for the API. No unrelated secrets or config paths requested.
Persistence & Privilege
always is false and the skill does not request system-wide changes. It suggests storing the API key in OpenClaw config or as an environment variable (user choice). Default autonomous invocation is allowed (platform default) but the skill's flow requires user confirmation prior to final submission.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install growthx-bx-submit
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /growthx-bx-submit 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.6
Fix API endpoint URL
v1.0.5
Fix API endpoint URL to backend.growthx.club
v1.0.4
Add git to required bins; fix API key setup instructions
v1.0.3
Add git to required bins; fix API key setup instructions to reference openclaw.json config instead of nonexistent install prompt
v1.0.2
Add git to required bins; fix API key setup instructions to reference openclaw.json config instead of nonexistent install prompt
v1.0.1
Remove agent memory scanning; only read standard project files
v1.0.0
growthx-bx-submit 1.0.0 — Initial release - Lets GrowthX members submit their projects to the Built at GrowthX showcase using a simple workflow. - Auto-detects project details from memory, manifest files, documentation, and workspace structure (including monorepos). - Guides users to review and confirm detected project info before submitting. - Handles authentication via GrowthX API key and provides error feedback for common issues (invalid key, missing fields, etc.). - Supports tech stack and category inference, and interactive user prompts for missing or clarifying details.
元数据
Slug growthx-bx-submit
版本 1.0.6
许可证
累计安装 0
当前安装数 0
历史版本数 7
常见问题

Built at GrowthX 是什么?

Submit your project to Built at GrowthX — the community builder showcase for GrowthX members. Requires a GrowthX API key. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 431 次。

如何安装 Built at GrowthX?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install growthx-bx-submit」即可一键安装,无需额外配置。

Built at GrowthX 是免费的吗?

是的,Built at GrowthX 完全免费(开源免费),可自由下载、安装和使用。

Built at GrowthX 支持哪些平台?

Built at GrowthX 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Built at GrowthX?

由 gxt-admin(@gxt-admin)开发并维护,当前版本 v1.0.6。

💬 留言讨论