skill-base-web-deploy
v1.0.0Skill Base server deployment guide. Covers starting the Skill Base server (npx skill-base), Docker configuration, port mapping, and SQLite database backup. F...
⭐ 1· 39·0 current·0 all-time
by@ginuim
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is an instruction-only deployment guide for Skill Base and its requested actions (npx, Docker, mounting a data dir, backing up SQLite files) match the stated purpose. There are no unrelated required env vars, binaries, or config paths.
Instruction Scope
SKILL.md stays on-topic (startup flags, data directory, Docker run/build, backup tips). It does instruct running npx and docker which will execute code fetched from external registries—this is expected for a deploy guide but worth verifying the package/image source before running in production.
Install Mechanism
No install spec or code files included (instruction-only). The guide references using npx and docker which fetch external artifacts at runtime; that is normal here but implies executing remote code.
Credentials
No credentials, env vars, or config paths are required by the skill itself. The documented environment variables (DATA_DIR, DATABASE_PATH, PORT) are directly relevant to the deployment task.
Persistence & Privilege
The skill is not always-enabled and makes no requests to modify other skills or global agent settings. It is instruction-only and does not demand persistent privileges.
Assessment
This skill is a straightforward deployment guide, but before running commands: (1) verify the origin of the npm package (npx will fetch and run code) and any Docker image/Dockerfile you build; (2) when exposing the service, prefer binding to 127.0.0.1 or restrict firewall rules for private deployments; (3) mount a dedicated data directory and back it up when the service is idle; (4) confirm filesystem permissions for the data volume; and (5) note the skill metadata lacks a source/homepage—if you plan to run in production, try to obtain the upstream repository or official release to verify authenticity.Like a lobster shell, security has layers — review code before you run it.
latestvk97dfmv34fsp8a4fg1t8msgr1x84vkh7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.