sealos-e3b0c4 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited sealos-e3b0c4 (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Deploy projects to Sealos Cloud from your AI agent.
Sealos Skills is a plugin-first skill pack centered on Sealos Cloud development and deployment. It helps an AI agent inspect a project, prepare missing deployment artifacts, connect Sealos Cloud databases and object storage for development, build or reuse a container image, ship the app to Sealos Cloud, and view deployed resources in a local read-only canvas.
The recommended Codex path is native Codex plugin installation. Cross-host plugin installs, skills.sh, and context-only extension hosts such as Gemini CLI and Qwen Code use the same root skills/** source.
Add this repository as a Codex marketplace, then install the Sealos plugin:
codex plugin marketplace add labring/sealos-skills
codex plugin add sealos@sealosOne Sealos plugin installs the deploy, database, S3, canvas, app-builder, and supporting cloud-native skills from root skills/**: sealos-deploy, sealos-database, sealos-s3, sealos-canvas, sealos-app-builder, cloud-native-readiness, dockerfile-skill, and docker-to-sealos.
For compatibility and local Codex testing, install the same plugin with:
npx plugins add https://github.com/labring/sealos-skills --target codexAfter installation in Codex, use the plugin from Codex:
$sealosSelect the Sealos plugin in Codex App
Codex examples:
$sealos deploy this repo to Sealos Cloud
$sealos deploy /path/to/project
$sealos deploy https://github.com/labring-sigs/kite
$sealos create a cloud Postgres database for this repo and wire DATABASE_URL
$sealos create private S3 object storage for uploads and wire env varsAdd this repository as a Claude Code marketplace, then install the Sealos plugin:
claude plugin marketplace add labring/sealos-skills
claude plugin install sealos@sealosFor compatibility with cross-host plugin installers, install the same plugin with:
npx plugins add https://github.com/labring/sealos-skills --target claude-codeIf you only use one detected agent tool on the machine, you can let plugins choose the target:
npx plugins add https://github.com/labring/sealos-skillsAfter installation in Claude Code, use /sealos:
/sealos deploy this repo to Sealos Cloud
/sealos deploy /path/to/project
/sealos deploy https://github.com/labring-sigs/kite
/sealos create a cloud Postgres database for this repo and wire DATABASE_URL
/sealos create private S3 object storage for uploads and wire env vars| Tool | Install | Usage |
|---|---|---|
| Codex CLI / Codex App | codex plugin marketplace add labring/sealos-skills then codex plugin add sealos@sealos | $sealos in Codex CLI, or + → Plugins → Sealos in Codex App |
| Claude Code | claude plugin marketplace add labring/sealos-skills then claude plugin install sealos@sealos | /sealos |
| Claude Code compatibility path | npx plugins add https://github.com/labring/sealos-skills --target claude-code | /sealos |
| OpenClaw / ClawHub | clawhub install labring/sealos-skills | Host command exposure depends on the ClawHub runtime |
| CodeBuddy | /plugin marketplace add labring/sealos-skills | Host command exposure depends on the CodeBuddy runtime |
| Gemini CLI | gemini extensions install https://github.com/labring/sealos-skills | Context-only extension; ask Gemini to use Sealos Skills |
| Qwen Code | qwen extensions install https://github.com/labring/sealos-skills | Context-only extension; ask Qwen to use Sealos Skills |
| Amp / Kimi / generic repo importers | Import https://github.com/labring/sealos-skills.git | Host-dependent |
Gemini CLI and Qwen Code manifests provide repository context through CLAUDE.md; they do not claim slash-command support.
skills.sh skill packIf your agent uses skills.sh directly, install the same skills pack with:
npx skills add labring/sealos-skillsThen run the deploy skill directly:
/sealos-deploy
/sealos-deploy /path/to/project
/sealos-deploy https://github.com/labring-sigs/kite
/sealos-database create a cloud Postgres database for this repo and wire DATABASE_URL
/sealos-s3 create private object storage for uploads and wire env varsAfter a project has been deployed, use the sealos-canvas skill through your installed plugin entry point.
/sealos-deploy, /sealos-database, and /sealos-s3 are direct skills.sh skill entries. Plugin usage should go through $sealos in Codex or /sealos in Claude Code.
Prefer the plugin install for Codex and Claude Code because it:
The Codex integration follows OpenAI's Codex plugin build guide:
.codex-plugin/plugin.json contains plugin identity, discovery metadata, interface copy, default prompts, brand metadata, and asset paths relative to the repository root..agents/plugins/marketplace.json registers this repo-local plugin for local Codex marketplace testing..claude-plugin/plugin.json and .claude-plugin/marketplace.json define the Claude Code-compatible plugin surface.distribution/platforms.json records platform support claims and evidence.marketplaces/README.md owns marketplace rules and prevents command-support overclaims.scripts/validate-codex-plugin.py validates the Codex manifest, Claude Code metadata, repo marketplaces, platform registry, and asset paths.skills/**/SKILL.md remains the only skill source; do not add a second packaged copy of the skills.Validate plugin metadata before publishing or pushing manifest changes:
python3 scripts/validate-codex-plugin.py
python3 -m json.tool .codex-plugin/plugin.json >/dev/null
python3 -m json.tool plugin.json >/dev/null
python3 -m json.tool .agents/plugins/marketplace.json >/dev/null
python3 -m json.tool marketplace.json >/dev/null
python3 -m json.tool .claude-plugin/plugin.json >/dev/null
python3 -m json.tool .claude-plugin/marketplace.json >/dev/null
python3 -m json.tool distribution/platforms.json >/dev/nullYou only need a plugin-compatible or skills.sh compatible AI agent and a project to deploy.
During the deploy, database, and object-storage flows, Sealos Skills will:
kubectl are availablesealos-cli for Sealos Cloud database creation, connection details, and database operationssealos-cli s3 for Sealos object storage buckets, credentials, quota checks, object operations, and presigned URLsFor an actual deployment, you will still need a Sealos Cloud account and access to a container registry, but these do not need to be fully set up before the skill starts. For database and object-storage work, you need a Sealos Cloud account and a workspace that can create the requested resources.
On a typical deploy, the agent will:
Later runs can switch to an in-place update flow when an existing deployment is detected.
For a local project or Devbox that needs a cloud database, the agent will:
DATABASE_URL, Prisma, Drizzle, MongoDB, MySQL, or Redissealos-cli database to list, create, inspect, and connect Sealos Cloud databasesFor a local project or Devbox that needs S3-compatible object storage, the agent will:
sealos-cli s3 from zjy365/sealos-cli#28 to list, create, inspect, and update object storage bucketsFor a repository already deployed by Sealos Deploy, the agent will:
.sealos/state.json to locate the deployed app.kubectl get commands.127.0.0.1 canvas UI.If the project has not been deployed yet, Sealos Canvas stops and directs the user to deploy the project first.
The plugin and skills.sh pack expose the same skill source:
sealos-deploy — deploy a local or GitHub project to Sealos Cloudsealos-database — create, connect, and operate Sealos Cloud databases for developmentsealos-s3 — create buckets, connect credentials, check quota, and operate Sealos S3-compatible object storagesealos-canvas — view deployed Sealos resources in a local read-only canvas UIsealos-app-builder — build Sealos Desktop apps with SDK integrationcloud-native-readiness — assess deployment readinessdockerfile-skill — generate production-ready Dockerfilesdocker-to-sealos — convert Docker Compose services into Sealos templatesskills/ is the single source of truth for Sealos deploy, Sealos canvas, and the supporting skills used during the deploy flow. The same root-level skills directory serves skills.sh installs and every plugin or extension manifest in this repository.
Important distribution files:
.codex-plugin/plugin.json — Codex plugin manifest.agents/plugins/marketplace.json — local Codex marketplace entry.claude-plugin/plugin.json — Claude Code-compatible plugin manifestmarketplace.json and .claude-plugin/marketplace.json — Claude-compatible marketplace entries.codebuddy-plugin/marketplace.json — CodeBuddy marketplace entrygemini-extension.json — Gemini CLI context extensionqwen-extension.json — Qwen Code context extensionopenclaw.plugin.json — OpenClaw / ClawHub bundle pointercommands/sealos.md — /sealos plugin command entry for compatible hostsdistribution/platforms.json — platform support registrymarketplaces/README.md — marketplace rules and support-claim ownershipscripts/validate-codex-plugin.py — Codex plugin validationDo not add a second packaged copy of the skills. Root skills/** is the only skill source for all installation paths.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.