Build, preview, and deploy websites, web apps, and APIs using Vercel, Railway, GitHub Pages, or local Canvas environments.
Security Analysis
high confidenceInstruction-only deploy guide that contains typical commands for Vercel, Railway, GitHub Pages and a local Canvas path; the steps and requested actions are consistent with a deployment helper and nothing in the skill asks for unrelated credentials or system access.
The SKILL.md provides a coherent set of deployment and local-preview commands for static sites, Next.js, Vite, FastAPI and deployment targets (Vercel, Railway, GitHub Pages, and a local 'clawd/canvas' folder). There are no unrelated requirements (no unexpected env vars, binaries, or config paths).
Instructions stay within the scope of building, previewing, and deploying web apps. They instruct using standard CLIs (vercel, railway, gh-pages) and local copy commands. The doc does not instruct reading unrelated files, exfiltrating data, or calling unexpected external endpoints.
No install spec or bundled code — this is instruction-only. Nothing will be written automatically to disk by the skill itself.
The skill declares no required environment variables or credentials, which is reasonable for an instruction-only guide. However the commands it recommends (e.g., `railway login`, `npx vercel`, `npx vercel env add`) will prompt you to authenticate to third-party services and/or create environment variables on those platforms at runtime; the guide does not attempt to collect those secrets itself.
always is false and there are no instructions to modify other skills or global agent settings. The recommended CLIs may store authentication tokens locally when you run them, but the skill itself does not request persistent privileges.
Guidance
This skill is an instruction-only deployment guide and appears coherent with its purpose. Before using it, keep these points in mind: - The file only suggests commands — it does not itself install anything or request credentials. You will need to run CLI tools (vercel, railway, gh-pages, npx, etc.) and those tools will require you to authenticate; that authentication is handled by those CLIs and may store tokens locally. - npx runs packages from the npm registry if a local binary isn't present. Verify command names (e.g., `vercel`, `http-server`, `serve`) are correct and from official packages to avoid typosquatting risks. - Do not commit secrets to git or include .env contents in your build artifacts; the guide already warns about this. - The guide includes copying files to ~/clawd/canvas — ensure you understand and trust that local path and its purpose before copying site files there. - If you want stronger assurance, install the official CLIs from vendor documentation (rather than running one-off npx invocations), and verify the source of any package before executing it.
Latest Release
v1.0.0
web-deploy v1.0.0 – Initial Release - Provides step-by-step guides for building and deploying web projects (websites, web apps, APIs) to production. - Includes quickstart workflows for local preview: static, Next.js, FastAPI, and Vite projects. - Documents deployment for Vercel (frontend), Railway (backend/APIs/databases), GitHub Pages (static), and Canvas (local server). - Features a comprehensive pre-deploy checklist for production readiness. - Explains rollback and custom domain configuration procedures for major platforms.
More by @cmanfre7
Published by @cmanfre7 on ClawHub
