← 返回 Skills 市场
Laravel Cloud
作者
Florian Beer
· GitHub ↗
· v1.2.2
946
总下载
4
收藏
1
当前安装
8
版本数
在 OpenClaw 中安装
/install laravel-cloud
功能描述
Manage Laravel Cloud infrastructure via API — apps, environments, deployments, databases, caches, domains, scaling, commands, storage, and WebSockets.
使用说明 (SKILL.md)
Laravel Cloud API Skill
Wraps the entire Laravel Cloud REST API in a single bash script.
Setup
Option 1 — Environment variable (preferred):
export LARAVEL_CLOUD_API_TOKEN="your-token-here"
Option 2 — Credentials file:
mkdir -p ~/.openclaw/credentials/laravel-cloud
echo '{"token":"your-token-here"}' > ~/.openclaw/credentials/laravel-cloud/config.json
Generate your token at: cloud.laravel.com → Settings → API Tokens
Usage
laravel-cloud \x3Cresource> \x3Caction> [args...]
Quick Reference
| Resource | Actions |
|---|---|
apps |
list, get, create, update, delete |
envs |
list, get, create, update, delete, start, stop, metrics, logs, vars-add, vars-replace |
commands |
list, get, run |
deployments |
list, get, initiate |
domains |
list, get, create, update, delete, verify |
instances |
list, get, sizes, create, update, delete |
bg-processes |
list, get, create, update, delete |
databases |
clusters, cluster, cluster-create, cluster-update, cluster-delete, cluster-metrics, types, list, get, create, delete, snapshots, snapshot, snapshot-create, snapshot-delete, restore, dedicated |
caches |
list, get, types, create, update, delete, metrics |
buckets |
list, get, create, update, delete |
bucket-keys |
list, get, create, update, delete |
websockets |
list, get, create, update, delete, metrics |
ws-apps |
list, get, create, update, delete, metrics |
ips |
list |
org |
get |
regions |
list |
Common Examples
# List all applications
laravel-cloud apps list
# Create an application (requires --repository)
laravel-cloud apps create --name "my-app" --region us-east-1 --repository owner/repo
# List environments for an app
laravel-cloud envs list \x3Capp-id>
# Create an environment
laravel-cloud envs create \x3Capp-id> --name "Production" --branch main
# Start / stop an environment
laravel-cloud envs start \x3Cenv-id>
laravel-cloud envs stop \x3Cenv-id>
# View environment metrics and logs
laravel-cloud envs metrics \x3Cenv-id> --period 24h
laravel-cloud envs logs \x3Cenv-id>
# Set environment variables
laravel-cloud envs vars-add \x3Cenv-id> --vars 'APP_KEY=base64:...,DB_HOST=localhost'
laravel-cloud envs vars-replace \x3Cenv-id> --vars 'KEY1=val1,KEY2=val2'
# Trigger a deployment
laravel-cloud deployments initiate \x3Cenv-id>
# Run an Artisan command
laravel-cloud commands run \x3Cenv-id> --command "php artisan migrate --force"
# Get organization and regions
laravel-cloud org get
laravel-cloud regions list
# Manage databases
# NOTE: Creating a cluster auto-creates a "main" database (schema).
# Use that default — don't create an extra one. Wire the "main" schema
# to your environment via: envs update \x3Cenv-id> --database-schema-id \x3Cmain-schema-id>
# To find the schema ID: databases cluster \x3Ccluster-id> (with ?include=schemas)
laravel-cloud databases clusters
# DB types: laravel_mysql_84, laravel_mysql_8, neon_serverless_postgres_16/17/18, aws_rds_mysql_8, aws_rds_postgres_18
laravel-cloud databases cluster-create --name my-db --type laravel_mysql_84 --region us-east-1 --size db-flex.m-1vcpu-512mb --storage 5
# Manage caches
laravel-cloud caches list
# Cache types: upstash_redis (sizes: 250mb, 1gb, ...) or laravel_valkey (sizes: valkey-pro.250mb, ...)
laravel-cloud caches create --name my-cache --type laravel_valkey --region us-east-1 --size valkey-pro.250mb
# Object storage
laravel-cloud buckets list
laravel-cloud buckets create --name my-bucket --region us-east-1
# WebSocket clusters
laravel-cloud websockets list
laravel-cloud ws-apps list \x3Cws-cluster-id>
# Per-resource help
laravel-cloud help
laravel-cloud envs help
laravel-cloud databases help
Dependencies
curl— HTTP requestsjq— JSON parsing and pretty-printing
安全使用建议
This skill appears to do exactly what it says: it's a bash CLI wrapper that calls the Laravel Cloud REST API. Before installing, be aware that the provided API token grants full API access to your Laravel Cloud account (ability to change env vars, trigger deployments, run commands, create/delete resources). Only supply a token with the minimum required scope, store it securely, and consider rotating/revoking the token after use. Verify you trust the skill author/source (the package comes with a script file — review it locally). Note: the script will attempt to resolve op:// 1Password references if the 'op' CLI is present, but 'op' is not required; this is optional convenience, not malicious. If you need stricter controls, create a limited-scope API token in Laravel Cloud rather than using an account-wide token.
功能分析
Type: OpenClaw Skill
Name: laravel-cloud
Version: 1.2.2
The skill bundle is classified as suspicious due to widespread shell injection vulnerabilities in `scripts/laravel-cloud.sh`. User-supplied arguments, such as resource IDs and flag values (e.g., for `--period`, `--vars`, or resource IDs in API paths), are directly interpolated into shell commands without proper sanitization or quoting. This allows an attacker controlling the input to the `laravel-cloud` script to execute arbitrary commands on the system running the OpenClaw agent. There is no evidence of intentional malicious behavior like data exfiltration to unauthorized endpoints or backdoor installation, but the critical vulnerabilities pose a significant risk.
能力评估
Purpose & Capability
Name/description describe a Laravel Cloud API wrapper and the skill only requires curl, jq, and a Laravel Cloud API token. The provided bash script implements API calls to cloud.laravel.com and exposes the resources/actions listed in the README — this is coherent with the stated purpose.
Instruction Scope
SKILL.md instructs the agent to use an API token or a credentials file located under ~/.openclaw/credentials/laravel-cloud/config.json; the script reads exactly that path and the LARAVEL_CLOUD_API_TOKEN env var. The script only constructs HTTP requests to the Laravel Cloud API. Note: the skill includes actions that run remote commands (e.g., 'commands run' to execute artisan on an environment) and can change environment variables/deployments — this is expected for an infra management tool but is powerful on the target infrastructure.
Install Mechanism
There is no install spec; the skill is instruction + a local bash script. No downloads from remote URLs or package installers are used. This minimal approach reduces install-time risk.
Credentials
Only LARAVEL_CLOUD_API_TOKEN is required (and an optional local credentials file). No unrelated credentials, system-wide config paths, or other secrets are requested. The script optionally supports resolving op:// 1Password references if the 'op' binary is present, but it does not require 'op' to be installed.
Persistence & Privilege
always:false (default) and the skill does not request persistent system-wide privileges or modify other skills' configs. It only reads/stores credentials in its own declared credentials path.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install laravel-cloud - 安装完成后,直接呼叫该 Skill 的名称或使用
/laravel-cloud触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.2.2
Fix DB defaults (scheduled snapshots, retention), bucket key permissions, deployment staleness check (diffInMinutes > 75)
v1.2.1
Fix SKILL.md examples, accurate DB/cache types
v1.2.0
Fix: DB cluster-create defaults for scheduled-snapshots/retention-days. Fix: bucket-keys use permission field instead of can_read/can_write. Updated examples with correct types/sizes. Note: DB clusters auto-create a main schema.
v1.1.0
Fix: database cluster-create now passes config (size, storage, public, snapshots, retention). Fix: envs update supports database/cache/websocket attachment. Fix: caches create defaults auto_upgrade=true, is_public=false. Fix: instances update supports scaling thresholds. Fix: envs logs defaults to last 15 min with --from/--to params.
v1.0.3
Fix: include CLI script in package
v1.0.2
Add skill.json manifest — script now included in package, credentials properly declared
v1.0.1
Fix metadata: declare required bins, env vars, credentials, and included script to pass security scan
v1.0.0
Initial release: 414-line bash CLI covering all 19 Laravel Cloud API resource categories
元数据
常见问题
Laravel Cloud 是什么?
Manage Laravel Cloud infrastructure via API — apps, environments, deployments, databases, caches, domains, scaling, commands, storage, and WebSockets. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 946 次。
如何安装 Laravel Cloud?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install laravel-cloud」即可一键安装,无需额外配置。
Laravel Cloud 是免费的吗?
是的,Laravel Cloud 完全免费(开源免费),可自由下载、安装和使用。
Laravel Cloud 支持哪些平台?
Laravel Cloud 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Laravel Cloud?
由 Florian Beer(@florianbeer)开发并维护,当前版本 v1.2.2。
推荐 Skills