← 返回 Skills 市场
greydanus

Tidepool

作者 greydanus · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
215
总下载
1
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install tidepool
功能描述
Build and deploy any kind of web app without leaving the command line. This project is built for autonomous AI agents. Handles auth, Stripe payments, admin p...
安全使用建议
This skill appears to do what it says (a CLI web app deployer) but it installs a third‑party Python package and performs network operations. Before installing: (1) verify the tidepool package/source (homepage, PyPI owner, repository) to ensure authenticity; (2) avoid pasting real production secrets into prompts — use test keys or inject secrets via your secure secret store rather than terminal history; (3) treat the install as running untrusted code (consider installing in an isolated environment or container); (4) review what will be stored under tp_data/ (secrets.json, db) and do not place system or cloud credentials there; (5) expect the CLI to make outbound HTTP requests (the curl to tidepool.sh/api and tp.http calls) — if you need an offline/sandboxed review, fetch the package source first and inspect it.
功能分析
Type: OpenClaw Skill Name: tidepool Version: 1.0.1 The skill provides a deployment platform for AI agents via the 'tidepool' CLI and service (tidepool.sh). It contains a high-risk instruction in SKILL.md directing the agent to fetch and process an external API reference (curl https://tidepool.sh/api), which serves as a vector for indirect prompt injection. While the capabilities (secret management, remote code execution/deployment, and database synchronization) are aligned with the stated purpose of a PaaS, the reliance on remote instructions and the handling of sensitive credentials like Stripe keys make it a high-risk tool for autonomous agents.
能力评估
Purpose & Capability
The skill declares and requires the 'tidepool' CLI and its SKILL.md shows CLI usage (pip install tidepool, tidepool init/dev/deploy). There are no unrelated env vars, binaries, or config paths requested that would be inconsistent with a web-deploy CLI.
Instruction Scope
Runtime instructions include network calls (curl https://tidepool.sh/api), installing/running the tidepool CLI, and APIs (tp.http, tp.email, tp.files, tp.db) that allow outbound HTTP and reading project-local secrets at tp_data/secrets.json. These behaviors match a deploy tool but give the agent the ability to make arbitrary outbound requests and read project-local secret files — expected for this purpose but worth attention.
Install Mechanism
Install spec is an external package (uv/pip install tidepool) which is expected for a CLI tool. Installing a third-party Python package from a registry is normal but carries supply-chain risk — verify package provenance (PyPI name, owner, homepage, source) before installing.
Credentials
No required environment variables or system credentials are requested up-front. Payment features (Stripe) are documented but handled via explicit secret push or project secrets — this is proportionate as long as you do not expose unrelated credentials to the skill.
Persistence & Privilege
The skill is not marked always:true and does not request system-wide config changes. Agent autonomous invocation is allowed (platform default) but not coupled with elevated persistent privileges in this package.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install tidepool
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /tidepool 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
Fix install kind: pip -> uv (supported by ClawHub)
v1.0.0
- Initial release of Tidepool: build and deploy web apps directly from the command line. - Built-in support for authentication, Stripe payments, admin panels, email, database, file storage, custom domains, secrets, markdown, and real-time SSE. - Minimalist workflow; deploy Python web apps in seconds with the Tidepool CLI and `tp.*` runtime API. - Includes commands for fast setup, iteration, and deployment (quickstart, dev server, push/pull, secret management). - Not intended for non-web tasks or general Python scripting.
元数据
Slug tidepool
版本 1.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Tidepool 是什么?

Build and deploy any kind of web app without leaving the command line. This project is built for autonomous AI agents. Handles auth, Stripe payments, admin p... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 215 次。

如何安装 Tidepool?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install tidepool」即可一键安装,无需额外配置。

Tidepool 是免费的吗?

是的,Tidepool 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Tidepool 支持哪些平台?

Tidepool 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Tidepool?

由 greydanus(@greydanus)开发并维护,当前版本 v1.0.1。

💬 留言讨论