Site Deployer

v3.2.0

Ship a static website in under 5 minutes — Vercel, Netlify, or GitHub Pages. Scaffolding, config, deploy, custom domains. Includes Tailwind templates, a pre-...

0· 251·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
The skill's stated purpose is to deploy static sites to Vercel, Netlify, or GitHub Pages. The SKILL.md provides a complete Vercel workflow (scaffold + vercel deploy), but it does not provide equivalent step-by-step commands for Netlify or GitHub Pages despite claiming support. The metadata declares no required binaries, yet the instructions assume standard POSIX tools (mkdir, cat, grep, dig) and the Vercel CLI are available—this is an inconsistency but not a direct malicious signal.
Instruction Scope
The instructions are concrete shell commands that create files and run 'vercel deploy --prod --yes'. They do not instruct reading unrelated system files or exfiltrating data to third-party endpoints beyond the expected deploy target. Note: running the deploy will upload your site content to Vercel (expected behavior for a deploy tool).
Install Mechanism
No install specification or downloadable code is included; this is instruction-only. That minimizes on-disk risk. However the skill implicitly requires the Vercel CLI and standard shell tools which the metadata does not list.
Credentials
The skill requests no environment variables or secrets. That is proportionate. Be aware that 'vercel deploy' requires the user's Vercel authentication (stored or provided at runtime) and the deploy will use that credential to upload the site. The skill does not attempt to access other credentials or config paths.
Persistence & Privilege
The skill is not set to always:true, is user-invocable, and does not request persistent privileges or modify other skills. Autonomous invocation is allowed by default but not combined with other concerning flags here.
Assessment
This skill is an instruction-only deploy helper that scaffolds a static site and runs a Vercel deploy. Before using it: (1) ensure you have the Vercel CLI (and other tools like grep/dig) installed and understand that 'vercel deploy' will upload your site content using your Vercel auth; (2) run the included grep checks to avoid accidentally publishing API keys or secrets; (3) if you intend to use Netlify or GitHub Pages, know that the README gives DNS tips but does not include full deploy commands for those hosts; (4) run these commands from a safe/test directory or review the generated files before executing the deploy to avoid publishing unintended content.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fa152hy02xvk2cf9qd2njwd836qqw

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments