← 返回 Skills 市场
dannyshmueli

Jits Builder

作者 Danny Shmueli · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1958
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install jits-builder
功能描述
Instantly build, deploy, and access single-page, vanilla JS mini-apps from voice or text descriptions via a Cloudflare tunnel URL.
使用说明 (SKILL.md)

JITS Builder - Just-In-Time Software 🚀

Build instant mini-apps from voice or text descriptions. Describe what you need, get a working tool deployed in seconds.

What is JITS?

Just-In-Time Software - the idea that you don't need to find or install tools. You describe what you need and it gets built on the spot.

"I need a timer that plays a sound after 25 minutes" "Make me a tool to split a bill between friends"
"Create a page where I can paste JSON and see it formatted"

Requirements

  • Cloudflared binary (auto-downloads to /tmp/cloudflared if missing)
  • Node.js (for serving the app)

How It Works

  1. Describe - Voice or text, explain what you want
  2. Generate - Agent builds a single-file HTML/JS/CSS app
  3. Deploy - Cloudflare tunnel makes it instantly accessible
  4. Use - Get a URL, use your tool, share it

Usage

Just ask naturally:

"Build me a pomodoro timer"
"I need a quick tool to convert CSV to JSON"
"Make a tip calculator"
"Create a color palette generator"

The agent will:

  1. Generate the HTML/JS code
  2. Save to /data/clawd/jits-apps/\x3Cname>.html
  3. Serve on a local port
  4. Create Cloudflare tunnel
  5. Return the public URL

Managing JITS Apps

# List running apps
/data/clawd/skills/jits-builder/jits.sh list

# Stop an app
/data/clawd/skills/jits-builder/jits.sh stop \x3Cname>

App Guidelines

When building JITS apps:

  1. Single file - All HTML, CSS, JS in one file
  2. No dependencies - Use vanilla JS, no external libraries
  3. Mobile-friendly - Responsive design
  4. Dark theme - Looks good, easy on eyes
  5. Self-contained - No backend/API calls needed
  6. Branded - Include "Built with JITS" badge

Template Structure

\x3C!DOCTYPE html>
\x3Chtml lang="en">
\x3Chead>
  \x3Cmeta charset="UTF-8">
  \x3Cmeta name="viewport" content="width=device-width, initial-scale=1.0">
  \x3Ctitle>🚀 JITS - [App Name]\x3C/title>
  \x3Cstyle>
    /* Dark theme, centered layout */
    body {
      font-family: -apple-system, sans-serif;
      background: linear-gradient(135deg, #1a1a2e, #16213e);
      min-height: 100vh;
      display: flex;
      align-items: center;
      justify-content: center;
      color: white;
    }
    /* ... app styles ... */
  \x3C/style>
\x3C/head>
\x3Cbody>
  \x3Cdiv class="container">
    \x3Ch1>[App Title]\x3C/h1>
    \x3Cdiv class="badge">Built with JITS\x3C/div>
    \x3C!-- App content -->
  \x3C/div>
  \x3Cscript>
    // App logic
  \x3C/script>
\x3C/body>
\x3C/html>

Example Apps

App Description
Pomodoro Timer 25/5 min work/break cycles with sound
Tip Calculator Split bills with custom tip %
JSON Formatter Paste JSON, see it pretty-printed
Color Picker Generate and copy color palettes
Countdown Timer to a specific date/event
QR Generator Text to QR code
Unit Converter Length, weight, temperature
Decision Maker Random picker for choices

Limitations

  • Single-page only - No multi-page apps
  • No backend - Client-side only, no databases
  • Temporary URLs - Tunnels expire when stopped
  • No persistence - Data doesn't survive refresh (use localStorage if needed)

Directory Structure

/data/clawd/jits-apps/
├── pomodoro.html      # App HTML
├── pomodoro.pid       # Server process ID
├── pomodoro.port      # Port number
├── pomodoro.url       # Tunnel URL
└── pomodoro.tunnel.pid # Tunnel process ID

"The best tool is the one you build exactly when you need it." 🐱🦞

安全使用建议
This skill's goal (quickly build and publish single-file apps) is plausible, but it performs risky runtime actions: auto-downloads a binary and creates public tunnels. Before installing or enabling it, review the jits.sh script content to see exactly what it downloads and from where, and verify package.json dependencies. Prefer running it in an isolated environment (container or sandbox). Require explicit Cloudflare credentials or a documented, trusted auth flow rather than implicit auto-downloading of cloudflared. If you will allow model-initiated runs, consider disabling autonomous invocation or restricting the skill so it cannot start tunnels without your explicit approval.
功能分析
Type: OpenClaw Skill Name: jits-builder Version: 1.0.0 This skill is classified as suspicious due to its inherent high-risk capabilities, specifically the use of `cloudflared` in `jits.sh` to create public tunnels to `localhost` and the execution of agent-generated HTML/JS code via `node -e`. While these actions are central to the skill's stated purpose of deploying 'Just-In-Time Software,' they create a significant attack surface. A malicious prompt or compromised agent could lead to public exposure of sensitive local resources or execution of arbitrary code, even though the skill itself does not contain explicit instructions for data exfiltration or persistence. The `SKILL.md` also notes that `cloudflared` is 'auto-downloads' by the agent, which introduces a supply chain risk if the download source is not securely managed by the agent.
能力评估
Purpose & Capability
The SKILL.md describes building single-file client apps and making them available via a Cloudflare tunnel, which legitimately requires Node.js (to serve) and a cloudflared binary (to create tunnels). However, the skill does not document how Cloudflare auth/certificates are provided or why no Cloudflare credentials or configuration are declared; that omission is inconsistent with the stated deployment goal.
Instruction Scope
Runtime instructions instruct the agent to save generated apps under /data/clawd/jits-apps/, start local servers, and create Cloudflare tunnels. They also state cloudflared will be auto-downloaded to /tmp if missing. Those runtime actions include network exposure and arbitrary binary download/execution and are broader than a simple code-generation helper — the SKILL.md does not limit or explain where the binary comes from or how tunnels are authenticated.
Install Mechanism
There is no formal install spec, but the skill claims it will auto-download the cloudflared binary at runtime. Auto-downloading and executing binaries at runtime is higher risk when the source/URL is not documented. package.json exists (implying Node usage) but there is no declared install step or vetted source list.
Credentials
No environment variables or credentials are declared despite the skill creating public tunnels; in practice cloudflared typically requires authentication (a cert or account linkage). The lack of declared credentials or guidance for how to securely supply them is a mismatch between required capabilities and declared requirements.
Persistence & Privilege
The skill is not marked always:true, but model invocation is not disabled. That means the agent could autonomously run the script, download a binary, start servers and tunnels, and publish URLs without additional gating. Combined with network-exposing behavior, this is a notable privilege to leave unconstrained.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install jits-builder
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /jits-builder 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release of JITS Builder (Just-In-Time Software). - Instantly generate and deploy mini-apps from simple voice or text descriptions. - Apps are single-file, mobile-friendly, dark-themed, and require no external dependencies. - Automatic deployment with Cloudflare tunnel for instant public access. - Simple management with commands to list and stop active JITS apps. - Includes guidelines and template structure for consistent JITS app generation.
元数据
Slug jits-builder
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Jits Builder 是什么?

Instantly build, deploy, and access single-page, vanilla JS mini-apps from voice or text descriptions via a Cloudflare tunnel URL. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1958 次。

如何安装 Jits Builder?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install jits-builder」即可一键安装,无需额外配置。

Jits Builder 是免费的吗?

是的,Jits Builder 完全免费(开源免费),可自由下载、安装和使用。

Jits Builder 支持哪些平台?

Jits Builder 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Jits Builder?

由 Danny Shmueli(@dannyshmueli)开发并维护,当前版本 v1.0.0。

💬 留言讨论