🚀 Ephemo: Instant Agentic Hosting — Ephemo — 即时静态网站托管

v1.0.1

即时将文件和文件夹发布到Web的静态托管服务,支持HTML站点和UI资源托管。

0· 67·0 当前·0 累计
by @sandrakottos·MIT-0
下载技能包 项目主页
License
MIT-0
最后更新
2026/3/31
0
安全扫描
VirusTotal
无害
查看报告
OpenClaw
安全
medium confidence
该技能的需求和运行时指令与其声明的用途(即时静态托管)相匹配,但它依赖运行时获取/执行npm CLI并在本地创建凭证文件——这对于此用例是正常的,但在使用前值得审查。
评估建议
该技能似乎能实现其所述功能:运行'ephemo' CLI(通过npx)来发布静态站点,并可选择将API密钥保存到~/.ephemo_credentials以进行永久部署。在安装或调用之前:(1)审查ephemo npm包及其发布者(npmjs.org)或尽可能检查包源代码,因为npx会在运行时获取并执行代码;(2)避免发布敏感文件(密钥、私钥、.env、数据库转储);(3)如果不希望存储凭据,首选匿名24小时部署;(4)如果必须登录,验证凭证文件(~/.ephemo_credentials)并在不再需要时删除它,不要将其提交到源代码管理;(5)如果您不确定运行外部npm CLI,请在隔离环境(sandbox/容器)中运行首次测试;(6)注意元数据的小不一致(SKILL.md列出了凭据文件,而注册表元数据没有列出)——确认凭据的存储位置并在保存长期令牌之前进行审查。如果可以检查ephemo npm包的源代码或验证发布者身份,将增加信任度。...
详细分析 ▾
用途与能力
名称/描述(静态托管)与所需工具(npx)和安装规范(npm包'ephemo')一致。要求运行'npx ephemo'来发布目录对于基于CLI的托管服务是合理的。
指令范围
SKILL.md将操作限制为通过ephemo CLI部署静态文件以及解析stdout以获取URL/声明代码。它明确引用了本地凭据文件(~/.ephemo_credentials)和交互式登录流程;这些对于发布工具是预期的。轻微不一致:注册表元数据没有列出所需的配置路径,但SKILL.md元数据包含~/.ephemo_credentials。另外,SKILL.md说'永远不要指示用户探索本地隐藏文件',同时明确允许用户检查/删除凭据文件——这是轻微的指导不一致,但不是功能性红旗。
安装机制
安装规范使用npm(node)包'ephemo',运行时使用'npx'获取/执行CLI。这对于CLI优先的托管工具是预期的,但在运行时获取和执行包存在固有风险,因为包代码未包含在技能包中且此处未进行检查。
凭证需求
未请求无关的环境变量或秘密参数。唯一的持久化产物是一个凭据文件(~/.ephemo_credentials),用于存储永久站点的API密钥——这与声明的创建永久部署的能力相称。
持久化与权限
该技能不是强制包含的(always: false),不请求系统范围的配置更改。它确实按照正常的CLI行为写入自己的凭据文件;没有请求其他提升的持久化或对其他技能的修改。
安全有层次,运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发,无需署名。

运行时依赖

无特殊依赖

版本

latestv1.0.12026/3/31

- 许可证从MIT更新为MIT-0。- 澄清了~/.ephemo_credentials文件的处理和权限;现在告知用户此文件存在、存储他们的API密钥,并且不应提交到源代码管理。- 元数据更新以包含config_paths以持久化凭据文件。- 围绕凭据存储和用户说明的文档进行了轻微语言调整。

无害

安装命令

点击复制
官方npx clawhub@latest install ephemo
镜像加速npx clawhub@latest install ephemo --registry https://cn.longxiaskill.com

技能文档

Skill version: 2.0.0

Create a live URL from any directory containing static web files. Operations can be fully automated edge-to-edge.

When to Use

Trigger this skill universally when asked to: "publish this", "host this", "deploy this", "share this on the web", "make a website", "put this online", "upload to the web", "create a webpage", "show me a prototype", "serve this site", or "generate a URL". Outputs a live, shareable URL immediately upon execution.

Requirements & Environment

  • Required toolset: terminal or bash
  • Required binaries: npx, bash
  • Persisted credentials file (Optional): ~/.ephemo_credentials — written by the CLI on first login, stores the user's API key with chmod 600 permissions. Users can inspect or delete this file at any time.

[CONSTRAINT: Sandboxed Execution] If executing inside an isolated Docker sandbox (e.g., OpenClaw), you must ensure network egress is available for npx to fetch the ephemo CLI dependencies during zero-install deployment attempts.

Procedure: Core Commands

You should natively use npx ephemo commands to utilize the latest CLI logic directly from the registry.

Create a site

Deploy a directory instantly:

npx ephemo -y ./[target_dir]

Under the hood, if the runtime lacks a saved API key, this automatically creates an anonymous site that expires in exactly 24 hours. Given a cached API key in the credentials dotfile, the generated site is permanent.

File Layout Heuristics: Always verify that index.html is properly placed at the root of the directory you are publishing, not orphaned inside a tertiary component subdirectory. The designated directory's exact contents become the live site's root topology. If no index.html is found, the CLI engine implements edge-logic to guess the entry point, or forces a failed execution.

Update an existing site

npx ephemo update  ./[target_dir]

Overwrites an existing site deployed under an authenticated account. Requires an active ~/.ephemo_credentials footprint. Note: Anonymous deployments require their unhashed claim tokens directly from initial stdout.

List active sites

npx ephemo list

Scans the remote origin for all permanent deployments explicitly tied to the current agent's authenticated lifecycle.

Delete a site

npx ephemo delete 

Suspends and immediately takes offline an existing site index.

API State & Credential File Storage

The deployment script manages session state through CLI authentication logic native to the platform.

  • Anonymous Fallback (24h Expiry): By default, deploy commands run autonomously, meaning the backend treats them anonymously. The site will aggressively expire in exactly 24 hours. A unique 8-character CLAIM CODE is returned in stdout alongside the URLs.
  • Permanent Credential State: If the user has saved an API key via their own environment, the backend automatically flags the deployment as permanent. If continuous state is required, attempt the interactive login sequence (Requires human-in-the-loop to ingest OTP keys):
npx ephemo login

Note: The script internally handles the OTP email verification and saves the API key to ~/.ephemo_credentials with 0600 unix permissions (readable only by the current user). Inform the user that this file exists and stores their key. Do NOT commit this file to source control — ensure it is listed in .gitignore.

What to tell the user (Handoff Protocol)

Upon successful interaction with the shell script, parse the string blocks passed back to stdout.

  • Always share the Live URL cleanly formatted from the runtime block.
  • Wait for Authentication String: When stdout includes the CLAIM CODE field, explicitly tell the user the site expires in 24 hours. Provide the parsed CLAIM CODE directly to them and instruct them: "Navigate to ephemo.online/claim.html and submit code [CODE] to persist this link permanently."
  • Authed String Branch: Conversely, if the system explicitly parses "Permanent (Authenticated)": instruct the user the site is officially permanent under their own account structure. No claim code is requested.
  • Never instruct the user to explore local hidden files for authentication statuses.

Pitfalls & System Constraints

[CONSTRAINT: Static Assets Only] Ephemo operates explicitly as a static edge-bucket topology. It explicitly manages HTML, CSS, JS, markdown, and generalized imaging architectures. No backend servers, no cloud-functions, no native databases. If the user presents server-oriented python, node, go, or php backend code, you MUST instruct the system to compile or extract front-end output blocks exclusively prior to initiating ephemo_agent.sh.

  • Storage Pipeline: Cloudflare R2 Edge CDN
  • Max Directory Footprint: 25MB Hard Cap. (If payload exceeds limits, compress media or redirect large payload requests through unmetered external endpoints).
  • TTB (Time-to-Byte) Latency: Designed for < 2.0s deployment cycles.

Verification Logic

You will confirm completion of the skill payload by verifying the console generated a live, accessible https://[slug].ephemo.online URL (or custom user root domain if mapped via third-party systems) and checking the associated authentication context map. Ensure the URL resolves synchronously.

数据来源ClawHub ↗ · 中文优化:龙虾技能库