Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add tubecreate/tubecli --skill website_managergit clone --depth 1 https://github.com/tubecreate/tubecliWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tubecreate/tubecli/website_manager)<a href="https://agentmods.dev/skills/tubecreate/tubecli/website_manager"><img src="https://agentmods.dev/badge/skills/tubecreate/tubecli/website_manager/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/tubecreate/tubecli/website_manager"><img src="https://agentmods.dev/badge/skills/tubecreate/tubecli/website_manager.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 5 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Tool Misuse · line 25 Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
- high Tool Misuse · line 44 Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
- medium MCP Rug Pull · line 52 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 53 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium Privilege Escalation · line 58 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00069 | $0.00986 |
| Opus 5 | $0.00034 | $0.00493 |
| Sonnet 5 | $0.00014 | $0.00197 |
| Haiku 4.5 | $0.00007 | $0.00099 |
Grade B, and why
website_manager scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- Websites: `EXTENSIONS_DATA_DIR/website_manager/websites.json` (atomic write, chmod 0600) How it starts
The opening of the file, as written. The whole thing — 62 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Website Manager Extension
Features
- Website list: card grid with name, URL, tokens (user_token, wp_token), status (active/deploying/failed)
- Add manually: dialog to enter name, user_token, wp_token, thumbnail
- Create automatically: pick a theme → enter site_name + CF credentials → automatic deploy pipeline
- Live deploy log: real-time SSE terminal stream (with a Cancel button to abort a running deploy)
- Cloudflare credentials: taken from Cloud Keys (cloud_api extension, cloudflare provider) or entered manually; supports both API Token and Global API Key (with email)
- Agent skills: exposes
🌐 Quản lý Website(list) and🚀 Tạo Website(deploy) as runnable skills attached to the Web Agent
API Endpoints
Website CRUD
GET /api/v1/website-manager/sites— list all websites (secrets masked)POST /api/v1/website-manager/sites— add a website manuallyPUT /api/v1/website-manager/sites/{id}— update a websiteDELETE /api/v1/website-manager/sites/{id}— delete a website
Deploy
POST /api/v1/website-manager/sites/deploy— start a deploy (cf_api_token / cf_account_id / cf_email optional if saved in cloud_api)POST /api/v1/website-manager/sites/{name}/cancel— cancel a running deploy (kills the whole process tree)GET /api/v1/website-manager/sites/{name}/logs— SSE log stream
Skill endpoints (for agents)
POST /api/v1/website-manager/skill/websites— human-readable site listPOST /api/v1/website-manager/skill/deploy— deploy from a natural-language request (name + template)
Templates & CF
GET /api/v1/website-manager/templates— fetch from autoweb.tubecreate.com/api/templatesGET /api/v1/website-manager/cloudflare-profiles— list CF profiles from cloud_api
Cloudflare Keys (cloud_api)
GET /api/v1/cloud-api/cloudflare/profiles— list CF profilesPOST /api/v1/cloud-api/cloudflare/profiles— add a CF profile (api_token + account_id [+ email for Global API Key])POST /api/v1/cloud-api/cloudflare/profiles/{label}/test— verify the CF tokenDELETE /api/v1/cloud-api/cloudflare/profiles/{label}— remove a profile
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 62 lines · 69 tokens per session scan B 26f89edd7763
website_manager is a skill published in the GitHub repository tubecreate/tubecli (167 stars, last pushed yesterday), licensed MIT. It adds 69 tokens to every session and 986 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
multi_agents
Enables multi-agent collaboration through teams, task delegation, and coordinated workflows.
auth_manager
Manage OAuth credentials & tokens for Google, Facebook, TikTok.
Browser Automation
Core browser automation features including profile management, fingerprint spoofing, and AI interaction.
cloud_api
Manages cloud AI provider API keys for Gemini, OpenAI, Claude, DeepSeek, Grok.
ollama_manager
Manages local Ollama AI models for agents to use without cloud API keys.
x-mankier
Search and browse man pages from ManKier.com. Command line interface for ManKier man page repository. Dependency: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.