← 返回 Skills 市场
appdeploy
作者
TobeyRebecca
· GitHub ↗
· v1.0.2
· MIT-0
116
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install toby-appdeploy
功能描述
Deploy web apps with backend APIs, database, file storage, AI operations, authentication, realtime, and cron jobs. Use when the user asks to deploy or publis...
安全使用建议
Before installing: verify the skill's source (repo or homepage) and the operator behind 'SkillBoss' and confirm you trust https://api.skillboss.co. Expect the skill to read your project files and upload them to that API — do not use it with repositories that contain secrets, private keys, or credentials unless you audit what will be sent. Resolve the metadata mismatch (registry shows no required env vars but SKILL.md requires SKILLBOSS_API_KEY). Ask the publisher for a privacy/security page or code repository, and ask how they filter sensitive files (.env, config, keys) during deploy. If you proceed, restrict the SKILLBOSS_API_KEY to a least-privilege credential and test with a non-sensitive sample project first.
能力标签
能力评估
Purpose & Capability
SKILL.md describes an app deployment skill that uses the SkillBoss API and requires SKILLBOSS_API_KEY — that is coherent with the name/description. However the registry metadata earlier reported 'Required env vars: none' and 'Primary credential: none', which contradicts SKILL.md. There is no homepage or source URL listed, which reduces provenance and increases the need for verification.
Instruction Scope
The runtime instructions tell the agent to call an external API (https://api.skillboss.co) and to provide app files, diffs, and to use tools such as src_glob (discover file paths) and deploy_app (send files). Sending project files and diffs to a third-party endpoint is expected for a deployer but is also data-exfiltration vector for secrets (API keys, private config). The SKILL.md does not clearly limit which paths must not be sent or provide safeguards to avoid leaking sensitive files (e.g., .env, config, private keys). There are also odd internal constraints (e.g., 'DO NOT display the version value to users') that are unusual and not explained.
Install Mechanism
This is an instruction-only skill with no install spec or code files to execute locally. That minimizes disk-write risk; the main runtime risk is network calls to the remote API described in SKILL.md.
Credentials
SKILL.md declares a required environment variable SKILLBOSS_API_KEY which is proportionate for authenticating to api.skillboss.co. However, the registry metadata contradicts this by listing no required env vars — the mismatch is an inconsistency that should be resolved. No other credentials are requested.
Persistence & Privilege
The skill is not always-enabled and is user-invocable; it does not request elevated, always-on presence or system config changes. Autonomous invocation is allowed by default but not an additional red flag here by itself.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install toby-appdeploy - 安装完成后，直接呼叫该 Skill 的名称或使用
/toby-appdeploy触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
Version 1.0.2 of the toby-appdeploy skill
- No file changes detected in this release.
- Functionality, usage, and documentation remain unchanged from the previous version.
v1.0.1
- Updated API base URL from api.heybossai.com to api.skillboss.co throughout documentation and usage examples.
- No functional changes to skill tools or logic. Documentation only.
v1.0.0
Initial release of appdeploy skill for deploying web apps via SkillBoss API Hub.
- Deploy web apps with backend APIs, databases, file storage, authentication, realtime features, and cron jobs.
- Provides tools for deploying, updating, deleting, and managing apps, with support for source browsing and versioning.
- Publishes deployed sites to a public URL using HTTP API calls via curl.
- Requires SKILLBOSS_API_KEY environment variable for authentication.
- Includes detailed usage workflow and setup instructions.
元数据
常见问题
appdeploy 是什么？
Deploy web apps with backend APIs, database, file storage, AI operations, authentication, realtime, and cron jobs. Use when the user asks to deploy or publis... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 116 次。
如何安装 appdeploy？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install toby-appdeploy」即可一键安装，无需额外配置。
appdeploy 是免费的吗？
是的，appdeploy 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
appdeploy 支持哪些平台？
appdeploy 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 appdeploy？
由 TobeyRebecca（@tobeyrebecca）开发并维护，当前版本 v1.0.2。
推荐 Skills