← 返回 Skills 市场
yz6214589-hash

PinMe Deploy

作者 yz6214589-hash · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
111
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pinme-deploy
功能描述
一键部署前端静态网站到 IPFS 网络。使用场景:(1) 用户需要部署静态网站、HTML页面、前端项目 (2) 用户提到pinme、IPFS部署、静态网站托管 (3) 用户需要快速预览或分享前端作品 (4) 用户要求发布、上传、部署静态页面。支持自动识别项目类型、构建并上传到 IPFS 网络,返回可访问的 URL。
安全使用建议
This skill looks like a legitimate Pinata-based deployer but has a few red flags you should consider before installing: (1) SKILL.md runs npm install / npm run build but the skill does not declare npm/node as required — ensure your environment has Node/npm or the commands will fail. (2) Features like ENS binding and team sharing imply additional credentials (wallet/private key, team tokens) that are not requested; ask the author how those are implemented and what extra permissions are needed. (3) The deploy process will read and upload files from the project path — double-check you run it only in the intended directory to avoid accidentally uploading sensitive files. (4) Only provide PINATA_API_KEY and PINATA_SECRET_KEY if you trust the skill; consider using scoped/limited Pinata credentials and testing in an isolated environment or container first. If you need higher assurance, request source code or an explicit list of commands the agent will run and verification that no other external endpoints are contacted.
功能分析
Type: OpenClaw Skill Name: pinme-deploy Version: 1.0.0 The pinme-deploy skill is a utility designed to help an AI agent deploy static websites to the IPFS network using the Pinata pinning service. The SKILL.md file provides clear instructions for project detection, building (via npm), and uploading files using the legitimate Pinata API endpoint (api.pinata.cloud). While the execution of 'npm install' and 'npm run build' carries inherent risks common to development tools, the skill's logic is transparent, aligned with its stated purpose, and lacks any indicators of malicious intent, data exfiltration, or unauthorized access.
能力标签
cryptorequires-sensitive-credentials
能力评估
Purpose & Capability
The skill's primary goal—uploading static sites to IPFS via Pinata—matches the required PINATA_API_KEY and PINATA_SECRET_KEY and the curl-based upload in SKILL.md. However, several advertised capabilities (ENS binding, team sharing, deployment statistics, incremental updates) either require other services/credentials (e.g., an Ethereum wallet or ENS write authority) or additional APIs that are not declared. Also the SKILL.md instructs npm install/npm run build but the declared required binaries list does not include npm/node, which is a direct mismatch.
Instruction Scope
The runtime instructions tell the agent to list directories, run npm install and npm run build, and upload local build files to Pinata using curl. Those actions inherently read arbitrary files under the specified project path and transmit files to an external service (Pinata). This is expected for a deployer, but it grants the skill broad access to local filesystem contents — the instructions do not define safeguards or limit which files to include, raising risk of accidental exfiltration if run on the wrong path.
Install Mechanism
No install spec and no code files are present (instruction-only), so nothing is downloaded or written during install. This reduces installation risk.
Credentials
The skill requests only PINATA_API_KEY and PINATA_SECRET_KEY, which are appropriate for Pinata uploads. That is proportionate. However, advertised features (ENS, team sharing) would normally require other credentials (wallet/private key, team service tokens) that are not requested—this is an unexplained capability mismatch. Also SKILL.md expects npm/node to be available but these are not listed in required binaries.
Persistence & Privilege
always:false and no config paths requested. The skill does not request permanent platform-level presence or modify other skills' configs. Autonomous invocation is allowed (default) but not combined with 'always:true' or broad undeclared credential access.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install pinme-deploy
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /pinme-deploy 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
init
元数据
Slug pinme-deploy
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

PinMe Deploy 是什么?

一键部署前端静态网站到 IPFS 网络。使用场景:(1) 用户需要部署静态网站、HTML页面、前端项目 (2) 用户提到pinme、IPFS部署、静态网站托管 (3) 用户需要快速预览或分享前端作品 (4) 用户要求发布、上传、部署静态页面。支持自动识别项目类型、构建并上传到 IPFS 网络,返回可访问的 URL。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 111 次。

如何安装 PinMe Deploy?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install pinme-deploy」即可一键安装,无需额外配置。

PinMe Deploy 是免费的吗?

是的,PinMe Deploy 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

PinMe Deploy 支持哪些平台?

PinMe Deploy 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 PinMe Deploy?

由 yz6214589-hash(@yz6214589-hash)开发并维护,当前版本 v1.0.0。

💬 留言讨论