Share Local Site

Share a local development server with anyone via a public URL. Use when you need to demo a site to a client, let a colleague preview your work, test on mobil...

This skill appears to do what it says: open a public tunnel to a local dev server. Before using it, keep in mind: (1) tunnels expose whatever is served on the chosen port—do not share sensitive dashboards, internal APIs, or authentication-protected pages; (2) the guide includes options that reduce security (StrictHostKeyChecking=no for SSH and DANGEROUSLY_DISABLE_HOST_CHECK for dev servers) which make connections easier but lower safety—only use them if you understand the risk; (3) your ngrok authtoken is a secret—do not paste it into untrusted places; (4) localhost.run establishes an outbound SSH connection to a third party—if you have strict network or data policies, review that; (5) the helper script is small and interactive (prompts before continuing if no server is detected) and requires standard tools (ssh, curl, ngrok/cloudflared if selected). Finally, if you consider the recommended persistent-process skill, review that other skill separately before installing.

Type: OpenClaw Skill Name: share-local-site Version: 1.1.0 The skill provides legitimate utilities for exposing a local development server to the internet using established services like ngrok, localhost.run, and cloudflared. The instructions in SKILL.md and the logic in scripts/tunnel.sh are consistent with the stated purpose, using standard commands and configuration fixes for common web frameworks. While tunneling services inherently expose local ports to the public internet, there is no evidence of malicious intent, data exfiltration, or hidden backdoors.