Halo Cli Operations

Use when operating Halo themes, plugins, attachments, backups, or moments from the terminal, including install, upgrade, activate, upload, download, create,...

Security Scan

The skill is an instruction-only helper for the 'halo' CLI and its declared requirements (the halo binary) match the described purpose; it is coherent but operators should be cautious about remote installs and the CLI's own stored credentials/configuration.

Purpose & Capability

Name and description match the SKILL.md: all actions described are halo CLI subcommands. The only declared requirement is the 'halo' binary, which is exactly what this skill needs.

Instruction Scope

Instructions are limited to running halo CLI commands (list/get/install/upgrade/delete, etc.). They explicitly allow downloading plugins/themes/attachments from arbitrary URLs and recommend bypassing confirmation with --yes for automation; this is expected for a CLI helper but means the agent could fetch and install remote artifacts if used that way.

Install Mechanism

No install spec or code is present (instruction-only). Nothing is written to disk by the skill itself and no external downloads are performed by the skill package.

Credentials

The skill declares no environment variables or credentials, which is appropriate. However, it implicitly depends on the local halo CLI configuration and profiles (authentication tokens, endpoint, etc.) that are outside the skill manifest—the CLI's stored credentials will be used when commands run.

Persistence & Privilege

always is false and there is no install-time persistent behavior. The skill does not request system-wide configuration changes or access to other skills' settings.

Assessment

This skill is coherent with its description and low-risk as an instruction-only helper, but take these precautions before using it: ensure the 'halo' binary on your system is the genuine tool you expect; avoid running URL-based installs from untrusted hosts (they can deliver executable plugins/themes); be careful using --yes or --force in automation—these bypass safety prompts and can make destructive changes; verify which halo profile/config the CLI will use (it may contain auth tokens or point to production); and back up data before performing upgrades or deletions.

Use this skill for halo theme, halo plugin, halo attachment, halo backup, and halo moment.

Commands

halo theme --help
halo plugin --help
halo attachment --help
halo backup --help
halo moment --help

Themes

halo theme list
halo theme current
halo theme get <name>
halo theme install --file ./theme.zip
halo theme install --url https://example.com/theme.zip
halo theme activate <name>
halo theme reload <name>
halo theme upgrade <name>
halo theme upgrade --all
halo theme delete <name> --force

Rules:

• theme list marks the active theme in table output.
• Local theme install uses --file.
• theme install --url and theme upgrade --url prompt for confirmation when the remote host is not www.halo.run; use --yes to bypass that prompt in automation or other non-interactive runs.
• upgrade --all is for App Store-aware upgrades, not direct --file or --url sources.

Plugins

halo plugin list
halo plugin get <name>
halo plugin install --file ./plugin.jar
halo plugin install --url https://example.com/plugin.jar
halo plugin enable <name>
halo plugin disable <name> --force
halo plugin upgrade <name>
halo plugin upgrade --all
halo plugin uninstall <name> --force

Rules:

• Plugin upgrades can use App Store-aware logic.
• plugin install --url and plugin upgrade --url prompt for confirmation when the remote host is not www.halo.run; use --yes to bypass that prompt in automation or other non-interactive runs.
• Treat disable, upgrade, and uninstall as mutating operations.

Attachments

halo attachment list
halo attachment get <name>
halo attachment upload --file ./image.png
halo attachment upload --url https://example.com/image.png
halo attachment download <name> --output ./downloads/image.png
halo attachment delete <name> --force

Rules:

• Use exactly one upload source: --file or --url.
• Upload and download show progress in TTY mode unless --json is enabled.

Backups

halo backup list
halo backup get <name>
halo backup create
halo backup create --wait
halo backup create --wait --wait-timeout 300
halo backup download <name> --output ./backup.zip
halo backup delete <name> --force

Rule:

• backup create --wait polls until completion or timeout.

Moments

halo moment list
halo moment get <name>
halo moment create --content "Hello from Halo CLI"
halo moment update <name> --content "Updated content"
halo moment delete <name> --force

Useful options include --visible, --tags, and release-time related flags.

Safety And Automation

• Use --profile <name> for the intended environment.
• Use --json when another tool needs structured output.
• Use --force for destructive non-interactive actions.
• Prefer list or get before batch or destructive maintenance.