Quick Deploy

Deploy projects to Vercel, Netlify, or Fly.io with one command. Auto-detects framework (Next.js, React, Python, Node.js, static HTML). Shows deploy URL when...

This skill appears coherent for deploying projects, but here are practical precautions before you use it: - Understand what will happen: the agent will read files in your project root and run deploy commands that upload your code to an external hosting provider. Only run it on repositories you intend to publish. - CLI installs: the instructions will install vercel/netlify CLIs via npm -g (global install) and run a fly.io install script via curl | sh. Those are official providers but installing global packages or piping remote scripts modifies your system—run this in a disposable/container environment or inspect the install commands first. - Authentication: the skill relies on the CLIs' auth flows; it does not ask for tokens, which is good. Make sure you are logged into the correct accounts and that the agent prompts you before deploying to production (the SKILL.md says to ask). - Production safety: confirm the skill's prompt is shown and answered before any production deploy; consider restricting the agent to preview/staging runs until you validate its behavior. - Origin caution: the skill has unknown source and no homepage. That doesn't make it malicious, but you should be more cautious: review the SKILL.md and (if used) monitor exactly which commands are run. If you want extra safety, run the commands the skill would use manually or inside a controlled CI container the first few times instead of letting the agent execute them autonomously.

Type: OpenClaw Skill Name: quick-deploy Version: 1.0.0 The skill provides deployment automation for Vercel, Netlify, and Fly.io, but utilizes high-risk execution patterns in `SKILL.md`. Specifically, it instructs the agent to use `curl | sh` for installing the Fly.io CLI (https://fly.io/install.sh) and global npm installs for other tools. While these actions are aligned with the stated purpose of the skill, the use of unverified remote script execution and broad shell access represents a significant security vulnerability.