360 Secure SkillHub
360 安全技能中心

Puter Deployer

面向 Puter 托管 Web 应用/站点的部署与更新流程:先运行 preflight 脚本检查 puter CLI、登录状态与构建目录,再选择 CLI 或 API 回退路径部署,随后用 verify_url 校验 HTTP 200 与预期片段,最后按模板输出含回滚命令的报告。覆盖生产目标前需用户确认;lint 提示存在指令冲突与破坏性动作风险。

logclinker
logclinker
热度 84.45
最近更新 2026-05-11 17:29:40
分类:开发依赖:代码执行 / 读写文件 / 第三方 API应用场景:DevOps / 自动化脚本 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add puter-deployer
Metadata
name
puter-deployer
description
Deploy or update Puter-hosted web apps/sites with a CLI-first, verify-first workflow. Use when user asks to publish to Puter, update an existing Puter app/site, create a new Puter app from a build directory, troubleshoot failed Puter deployment, or prepare rollback. Trigger on phrases like "deploy to Puter", "publish Puter app", "update Puter site", "Puter deployment failed", or "rollback Puter deploy".

Puter Deployer

Use a strict flow: preflight → build/stage → deploy path selection → verify → rollback note.

1) Preflight (always)

Run:

bash skills/puter-deployer/scripts/preflight.sh <project_dir> <build_dir>

This checks:

  • puter CLI exists
  • puter whoami works
  • build directory exists and is non-empty
  • index.html exists

If any check fails, stop and report exact fix commands.

2) Deployment path selection

Choose one path explicitly:

  1. Create new Puter app entry (CLI-supported):
    • puter app:create <name> <remoteDir> --description "..." --url "..."
  2. Update/publish build content:
    • Use Puter API fallback guidance in references/api-fallback.md.
    • If API details are unclear for this host/version, inspect active puter-cli source behavior before pushing.

Important: current public puter-cli command surface is limited. Do not invent non-existent commands.

3) Verify deployment (always)

Run:

bash skills/puter-deployer/scripts/verify_url.sh <url> [expected_snippet]

Require:

  • HTTP 200
  • expected snippet present (if provided)

If verification fails, mark deployment unsuccessful.

4) Rollback note (always)

Return these fields in final report:

  • source commit
  • previous known-good artifact path
  • previous known-good URL
  • exact rollback command/runbook

Use scripts/deploy_report_template.md as output skeleton.

Guardrails

  • Never print auth tokens.
  • Never delete remote app/site without explicit user request.
  • Require explicit confirmation before overwriting production targets.
  • On failure, classify into one bucket:
    1. auth/session
    2. missing build artifact
    3. wrong app/site target
    4. platform/API error

References

  • references/deploy-checklist.md — end-to-end checklist
  • references/api-fallback.md — API-first fallback logic when CLI is insufficient
  • references/failure-playbook.md — common failure signatures + fixes