Skills render-automation
📦

render-automation

Content revision r2 Medium Risk ⚙️ External commands🌐 Network access

Automate Render Services and Deployments

Manual Render service discovery and deployment tracking can slow routine cloud operations. This skill coordinates Render tools through Rube MCP for repeatable workflows.

Supports: Claude Codex Code(CC)
📊 69 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "render-automation" from https://skillstore.io/skills/render-automation.md and its manifest at https://skillstore.io/api/skills/render-automation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/render-automation.md Signed manifest GET /api/skills/render-automation/manifest Signed lockfile GET /api/skills/render-automation/lockfile

Test it

Using "render-automation". List web services containing checkout.

Expected outcome:

Found two matching web services: checkout-api and checkout-worker. The summary includes each service ID, type, and pagination status.

Using "render-automation". Check the current deployment for the confirmed checkout service.

Expected outcome:

The deployment is live. The summary includes the deployment ID, commit, creation time, update time, and completion time.

Using "render-automation". Deploy the service containing payments.

Expected outcome:

Two services match payments. No deployment started because an exact target was not confirmed.

Security Audit

Medium Risk
v5 • 7/23/2026 Open versioned report

Static command findings are false positives caused by Markdown backticks and code fences; no shell or Ruby execution is present. The remote Rube MCP endpoint is a genuine low-severity network dependency. A medium operational risk remains because substring service matching can select an unintended deployment target.

1
Files scanned
191
Lines analyzed
1
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
SKILL.md:47SKILL.md:56-58SKILL.md:116-120
Ambiguous Service Resolution Before Deployment
The workflow uses substring name matching, then permits deployment without requiring exact-match disambiguation or explicit target confirmation.
The source explicitly states that name filtering is substring-based and directs the agent to choose a result before triggering a deployment.
Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low
SKILL.md:21
Hardcoded URL
**Get Rube MCP**: Add `https://rube.app/mcp` as an MCP server in your client configuration. No API k
The skill directs clients to connect to https://rube.app/mcp, creating a genuine third-party network and trust dependency. No malicious destination or exfiltration is evident.

Risk Factors

⚙️ External commands (37)
SKILL.md:16 SKILL.md:17 SKILL.md:21 SKILL.md:24 SKILL.md:25 SKILL.md:36 SKILL.md:39 SKILL.md:40 SKILL.md:41 SKILL.md:42 SKILL.md:46 SKILL.md:56 SKILL.md:57 SKILL.md:58 SKILL.md:62 SKILL.md:63 SKILL.md:65 SKILL.md:66 SKILL.md:69 SKILL.md:72 SKILL.md:81 SKILL.md:84 SKILL.md:85 SKILL.md:86 SKILL.md:89 SKILL.md:100 SKILL.md:103 SKILL.md:104 SKILL.md:117-121 SKILL.md:121-124 SKILL.md:124-128 SKILL.md:128-132 SKILL.md:132-138 SKILL.md:138-142 SKILL.md:142-143 SKILL.md:143-145 SKILL.md:145-171
🌐 Network access (1)
SKILL.md:21
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/render-automation/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/render-automation/security.svg)](https://skillstore.io/skills/render-automation?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/render-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/render-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/render-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). render-automation security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/render-automation/audits/5

BibTeX citation

@techreport{sickn33-render-automation-2026, author = {sickn33}, title = {render-automation security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/render-automation/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "render-automation security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-07-23" url: "https://skillstore.io/skills/render-automation/audits/5" identifiers: - type: other value: "skillstore:render-automation:audit:5" description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage
sickn33 Recommended

sickn33-render-automation

Skillstore Score 69
Evidence Confidence High
Skillstore usage 7
Updated

2026-08-21

sickn33 Current

render-automation

Skillstore Score 69
Evidence Confidence High
Skillstore usage 6
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
68
Community
83
Spec Compliance

What You Can Build

Inventory Render Resources

List services and projects, apply filters, and collect identifiers across paginated results.

Deploy a Selected Service

Resolve an exact service target, trigger a deployment, and monitor the result.

Track Release Progress

Check a known deployment and summarize status, timestamps, commit details, and terminal outcome.

Try These Prompts

Browse Services 
List my Render services. Filter by {service_type} and {name_text}, follow pagination, and summarize names, IDs, types, and status.
Check a Deployment 
Check deployment {deploy_id} for service {service_id}. Report its state, commit, timestamps, and whether it reached a terminal state.
Deploy and Monitor 
Find the exact Render service named {service_name}. Show matching IDs, ask me to confirm one, then deploy it and monitor completion.
Run a Clean Deployment 
Search current Render tool schemas. Verify service ID {service_id}, trigger a cache-clearing deployment, throttle polling, and report failures with available details.

Best Practices

  • Search current Rube tool schemas before starting each workflow.
  • Confirm the exact service ID and environment before triggering a deployment.
  • Poll every 10 to 30 seconds and stop after reaching a terminal state.

Avoid

  • Do not deploy from a substring name match without explicit target confirmation.
  • Do not poll rapidly or continue polling after a terminal state.
  • Do not assume a failed deployment automatically rolls back the service.

Frequently Asked Questions

What Render operations does this skill support?
It lists services and projects, triggers deployments, and retrieves deployment status.
What connection is required?
You need Rube MCP configured and an active authenticated Render connection.
Can it clear the build cache?
Yes. It can request a cache-clearing deployment when the current tool schema supports that option.
Can it monitor a deployment until completion?
Yes. It polls deployment status at reasonable intervals until a terminal state appears.
Can it create or delete Render services?
No. The documented workflows cover listing resources, triggering deployments, and monitoring deployment status.
How should deployment targets be selected safely?
Use an exact service ID and confirm the intended environment before starting the deployment.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Repository

https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/render-automation

Ref

ebdfe608f5de2b66ff37ab4af12af8ac4f5e8006

Maintenance freshness

7/25/2026

Usage

5 downloads · 88 views

File structure

📄 SKILL.md

More from sickn33

View all

Related Skills

View all