Install
$ agentstack add skill-xclouddev-xcloud-agent-skills-xcloud-agent-skills ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
xCloud Agent Skills v3.0.3
[](https://github.com/xCloudDev/xcloud-agent-skills/blob/main/CHANGELOG.md) [](https://github.com/xCloudDev/xcloud-agent-skills/blob/main/LICENSE) [](https://xcloud.host) [](https://clawhub.ai/asif2bd/skills/xcloud) [](https://openclaw.ai)
Built for xCloud hosting operators by xCloud · GitHub · User Guide · Install Guide · API Docs · OpenClaw Tutorial · Tutorial Video · Security Notes
> Security notice: agent-only xCloud operations toolkit. This package contains skill routing instructions, reference docs, and a small bash/curl wrapper. It ships no API tokens and only calls the xCloud API after a user or agent explicitly invokes a skill with XCLOUD_API_TOKEN configured.
This root skill describes the official xCloud Public API plugin bundle for agent marketplaces such as ClawHub and skills.mp.com.
The runnable skills live under plugins/xcloud/skills/ and are invoked as:
xcloud:serversxcloud:sitesxcloud:wordpressxcloud:sslxcloud:account
What It Provides
Use this package when an agent needs to operate xCloud hosting infrastructure through the xCloud Public API:
- Manage servers, services, monitoring, PHP versions, databases, firewall rules, fail2ban, and snapshots
- Manage sites, domains, cache, backups, deployment logs, rescue workflows, SSH/SFTP, cron jobs, and access logs
- Manage Git deployment settings and trigger manual Git deployments for xCloud sites
- Manage WordPress health, updates, plugins, themes, vulnerabilities, PageSpeed, WP_DEBUG, and magic-login URLs
- Run team-wide vulnerability rollups across all xCloud sites
- Manage SSL certificates, renewals, custom certificates, certificate status, and Cloudflare certificates
- Read account identity, API health, API tokens, Cloudflare integrations, and WordPress blueprints
Agent Experience
- Every user-facing reply is xCloud branded with a clear header and `_via
xcloud:*_` footer.
- The first xCloud interaction greets the user and shows the xCloud startup
banner once per conversation.
- If no token is configured, xCloud proactively explains how to create a scoped
API token and store it in the agent runtime as XCLOUD_API_TOKEN; it does not ask users to paste production tokens into chat by default.
- After token setup, xCloud verifies the connection with
/healthand/user
before continuing operational tasks.
Setup
Create an xCloud API token from:
https://app.xcloud.host/settings/api-tokens
Then configure your runtime:
export XCLOUD_API_TOKEN="your-token-here"
export XCLOUD_API_BASE_URL="https://app.xcloud.host"
The shared command wrapper is:
"${CLAUDE_PLUGIN_ROOT}"/scripts/xcloud.sh GET /user
Official Links
- xCloud: https://xcloud.host
- Dashboard: https://app.xcloud.host
- User guide: https://github.com/xCloudDev/xcloud-agent-skills/blob/main/docs/USER_GUIDE.md
- Install guide: https://github.com/xCloudDev/xcloud-agent-skills/blob/main/docs/SKILLS-GUIDE.md
- Official repository: https://github.com/xCloudDev/xcloud-agent-skills
- Development fork: https://github.com/Asif2BD/xcloud-agent-skills
- Public API docs: https://app.xcloud.host/api/v1/docs
- OpenClaw + ClawHub tutorial: https://xcloud.host/openclaw-skills-and-clawhub-on-xcloud-openclaw-agent/
- Tutorial video: https://www.youtube.com/watch?v=oEE9OHo3_48
Safety
This package contains documentation, skill routing instructions, and a small shell wrapper. It does not include real API tokens and does not run API calls during installation. Network requests are made only after a user or agent explicitly invokes an xCloud skill with an API token configured in the environment.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: xCloudDev
- Source: xCloudDev/xcloud-agent-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.