← 返回 Skills 市场
Web Hosting
作者
Hagen Hoferichter
· GitHub ↗
· v1.0.0
650
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install web-hosting
功能描述
Deploy local web projects to live URLs by automating GitHub repo creation, Vercel/Netlify deployment, and optional custom domain setup with SSL and CI/CD.
安全使用建议
Before installing or invoking this skill, ask the publisher to explain exactly how MATON_API_KEY is used: does your repository source or secrets get proxied through Maton's servers, or are actions performed locally? Prefer using direct provider credentials (GitHub PAT, Vercel/Netlify tokens) if possible. Inspect the clawhub/npm package (clawhub@latest) that will be fetched by npx and the referenced upstream skills (github-api, vercel, netlify, api-gateway) so you understand where code and data are sent. If you must test, use a throwaway repository and minimal-privilege/dummy tokens first. Avoid granting broad MATON_API_KEY scopes until you confirm the control plane's behavior and data retention policies. Finally, be cautious about the agent reading home paths like ~/Projects/manager — restrict its working directory to only the project you intend to publish.
功能分析
Type: OpenClaw Skill
Name: web-hosting
Version: 1.0.0
The skill is benign. It provides detailed instructions for an AI agent to orchestrate web project deployments using standard tools and services (GitHub, Vercel, Netlify). While it requires access to sensitive API keys (`MATON_API_KEY`, `VERCEL_TOKEN`, `NETLIFY_AUTH_TOKEN`), this is necessary for its stated purpose. Crucially, the `SKILL.md` includes robust guardrails, explicitly instructing the agent to never fail silently, always disclose missing credentials, and verify outcomes (e.g., reachable URLs, DNS propagation) before claiming success, which actively mitigates prompt injection risks and prevents malicious or unauthorized actions.
能力评估
Purpose & Capability
Name/description match the actions described (create repo, push, trigger Vercel/Netlify, wire domains). Required binaries (git/node/npm/npx) make sense. However, the skill mandates MATON_API_KEY for the github-api and api-gateway paths — this delegates GitHub/API operations to a Maton control plane instead of using a direct GitHub token, which is unexpected and should be justified.
Instruction Scope
SKILL.md tells the agent to audit the project, initialize git, create a remote via github-api, push, run vercel/netlify CLIs, and optionally manage domains. Those steps are within purpose, but the github-api and api-gateway routes are mediated by Maton (MATON_API_KEY) — this implies actions and possibly repository metadata/content will be routed to an external control plane. The doc also references a specific local path (~/Projects/manager) for domain-dns-ops, which could cause the agent to look in user home directories. The instructions to install other skills via npx implicate network installs at runtime.
Install Mechanism
The skill is instruction-only (no files to execute), which reduces on-disk risk. But it instructs using 'npx -y clawhub@latest install ...' to fetch/install other skills — that will download and run code from the npm registry at runtime. This is a common pattern but still a non-trivial dynamic install operation that fetches third-party code and should be reviewed before execution.
Credentials
Only MATON_API_KEY is declared as required, but the skill also expects VERCEL_TOKEN/NETLIFY_AUTH_TOKEN or CLI logins. Requiring MATON_API_KEY as mandatory for GitHub operations is disproportionate: a GitHub personal access token would be the usual, minimal credential. MATON_API_KEY grants access to a separate control plane (Maton) and could allow that external service to act on behalf of the user across multiple providers; the need for it is not justified in the doc beyond 'github-api requires it.'
Persistence & Privilege
The skill does not force installation into every agent run (always: false) and is user-invocable. Model invocation is enabled (disable-model-invocation: false), so the agent could autonomously run the orchestration when invoked — combined with a broad external credential (MATON_API_KEY) and runtime installs, this increases the blast radius if the key is overprivileged. The skill does not declare modifying other skills' configs.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install web-hosting - 安装完成后，直接呼叫该 Skill 的名称或使用
/web-hosting触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release as an orchestration meta-skill for one-command web hosting:
- Enables local project deployment to live, production URLs with SSL and CI/CD via Vercel or Netlify, orchestrated through above skills.
- Automates repository creation, code push, host linking, deployment trigger, and live URL verification.
- Supports optional custom domain DNS setup via domain-dns-ops or api-gateway if available.
- Provides unified workflow and output contract for framework detection, infra gating, deploy status, and next steps.
- Enforces explicit credential/auth checks, missing-stage reporting, and robust failure handling at all critical steps.
元数据
常见问题
Web Hosting 是什么？
Deploy local web projects to live URLs by automating GitHub repo creation, Vercel/Netlify deployment, and optional custom domain setup with SSL and CI/CD. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 650 次。
如何安装 Web Hosting？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install web-hosting」即可一键安装，无需额外配置。
Web Hosting 是免费的吗？
是的，Web Hosting 完全免费（开源免费），可自由下载、安装和使用。
Web Hosting 支持哪些平台？
Web Hosting 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Web Hosting？
由 Hagen Hoferichter（@h4gen）开发并维护，当前版本 v1.0.0。
推荐 Skills