Build Websites while you Sleep

Autonomously research B2B SaaS trends, find a problem, and build/deploy a solution website to Vercel quickly. Use when asked to "build a website", "run websi...

Security Scan

This skill's requirements and instructions match its stated purpose (scaffold and deploy lightweight websites to Vercel); nothing requested appears disproportionate or unrelated.

Purpose & Capability

Name/description say: research, build, deploy a website to Vercel. Declared requirements (vercel CLI, npm, VERCEL_TOKEN) and the included build script directly support that goal and are appropriate.

Instruction Scope

Instructions direct autonomous web research (GitHub, Reddit, Hacker News) and scaffolding + deployment. They do not ask to read unrelated local files or exfiltrate secrets, but they do permit network searches and use of external CLIs/tools (e.g., gh, web_search) which will access the internet — make sure you consent to autonomous network activity and idea selection without prompting. The script writes to the working directory and scaffolds projects (may overwrite if target chosen carelessly).

Install Mechanism

No install spec (instruction-only) and only includes a shell script. The script invokes npx create-next-app (downloads templates/packages from npm) and the vercel CLI for deploys — expected for this use, but these operations fetch and execute remote code, which is standard but worth noting.

Credentials

Only VERCEL_TOKEN is required and is the declared primary credential; this is proportionate for deploying sites to Vercel. No other credentials or config paths are requested.

Persistence & Privilege

Skill is not always-enabled, does not request elevated persistence, and does not modify other skills or system-wide agent settings. It runs only when invoked.

Assessment

This skill is internally coherent for auto-building and deploying small websites, but review these points before installing: - The skill will perform network research and scaffold code without asking the user for ideas; if you prefer to approve ideas first, run it with --skip-deploy and inspect the scaffold. - It requires a VERCEL_TOKEN. Use a least-privilege or short-lived token and be prepared to revoke it after use (do not reuse a token that grants access to unrelated projects). - The script uses npx/create-next-app and the vercel CLI, which download and run remote code from npm and Vercel — run in an isolated environment if you want stronger containment. - The script writes files into the chosen directory; avoid names that would overwrite important data. Consider running with --skip-deploy to inspect outputs before deploying. - If you want tighter control over external searches (GitHub/Reddit/HN), ensure the agent's web-search/gh access is limited or perform the research yourself and provide the idea. Overall this skill appears to do what it claims, but treat the Vercel token and remote-package execution with standard caution.

Website Builder

Autonomously research, build, and ship a B2B SaaS website fast.

Workflow

1. Check for Vercel Token:
   • Verify that the $VERCEL_TOKEN environment variable is set or vercel CLI is authenticated. If not, stop and inform the user.
2. Research Trends & Problems (Do not ask the user):
   • Search for current trends, complaints, and problems people are having on platforms like GitHub (issues, discussions), Reddit, and HackerNews.
   • You can use tools like web_search or the gh CLI to find these problems.
   • Identify ONE clear problem that a lightweight web app can solve.
3. Build the Solution:
   • Design and build an app (static or Next.js) that specifically solves the problem you found.
   • static for a single-file landing page or micro-tool.
   • nextjs for multi-page/app-router projects.
4. Deploy:
   • Deploy the project to Vercel using your Vercel token.
5. Return:
   • The deployed URL, the problem you found, and how your app solves it.

Command

bash skills/website-builder/scripts/build-and-deploy.sh --name "my-auto-saas" --mode static --idea "Solution to X based on Y trend"

Optional:

bash scripts/build-and-deploy.sh --name "my-site" --mode nextjs --idea "MVP concept"

Local scaffold test (no deploy):

bash scripts/build-and-deploy.sh --name "my-site" --mode static --skip-deploy

Notes

• Require vercel CLI auth beforehand (VERCEL_TOKEN in ~/.bashrc or session).
• Never hardcode secrets into source files.
• Prefer polished dark UI defaults unless user asks otherwise.
• For larger projects, scaffold first, then iterate in follow-up turns.

See references/workflow.md for detailed operational guidance.