by mikehasa
Take your agent-built product live: hosting, database, domain, email, payments — on your own accounts. Open-source Agent Skill + zero-dependency Node CLI: detect → plan → approve → apply → verify. No GoLive account, backend or telemetry.
# Add to your Claude Code skills
git clone https://github.com/mikehasa/golive-skillLast scanned: 9/25/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-09-25T09:24:58.017Z",
"npmAuditRan": false,
"pipAuditRan": true,
"promptInjectionRan": true
}See how golive-skill compares with popular alternatives.
golive-skill is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by mikehasa. Take your agent-built product live: hosting, database, domain, email, payments — on your own accounts. Open-source Agent Skill + zero-dependency Node CLI: detect → plan → approve → apply → verify. No GoLive account, backend or telemetry. It has 1,243 GitHub stars.
Yes. golive-skill passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/mikehasa/golive-skill" and add it to your Claude Code skills directory (see the Installation section above).
golive-skill is primarily written in TypeScript. It is open-source under mikehasa on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh golive-skill against similar tools.
No comments yet. Be the first to share your thoughts!
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
English · 简体中文 · 日本語 · 한국어 · Español · Português (Brasil) · Deutsch
Take your agent-built product live: hosting, database, auth, domain, email, payments — on your own accounts. Then hand it over, or tear it all down.
Your coding agent can build an app in minutes. Getting it to real users still means accounts, hosting, databases, domains, secrets and connected services. GoLive is the open-source Agent Skill for that work: it detects what your app needs, plans the exact changes, asks for your approval, applies them with your own logins, and verifies what actually works — then records what it created, re-checks it for drift on demand, and can remove it again.
Automate the parts providers expose. Guide you through the parts that need a human. Verify what can be observed, and make unfinished work clear. No GoLive account, hosted backend or product telemetry.
Early alpha · 0.1.0-alpha.8 Disposable live tests now cover six journeys: hosting (Vercel, Netlify), database (Supabase, Neon), custom-domain DNS (Porkbun, GoDaddy), transactional email (Resend), test-mode payments (Stripe) and Supabase authentication, plus the
teardownuninstall path. The ownership document and the on-demandgolive statusdrift check are implemented with test coverage (golive statusalso ran read-only in a live validation), while the broader roadmap is our direction, not a claim that it is all built.
Whether to give an agent your provider accounts comes down to four questions. These are this project's answers, with the limits stated where they exist.
apply refuses without that plan's id and --yes, and it re-checks the plan's identity
before writing, so a changed release or config invalidates the old approval. DNS writes need
--confirm-dns, deletions need --confirm-destroy, and live-mode steps — live payments, production
data, a real account — need --confirm-live, which now includes a project's first production
deploy, because approving a plan alone used to be enough to write production for the first time.
Credential values are read only in-process, never printed, and never in arguments, plans, state or
reports; the file golive stores them in is plaintext at mode 0600 outside your repo, not a keychain.
One limit worth naming: those flags are arguments the agent passes on your behalf, and an agent
already logged in to your provider can write there with no golive plan at all.
Trust, access and control separates what the code enforces from what is only an
instruction the agent is asked to follow.apply stops at the first failed check, missing
confirmation, missing prerequisite or provider that contradicts the plan. Later steps do not run,
and the next apply resumes at that step. Recovery covers
reading the failure, which steps resume, and the cases that need a reviewed decision first.release.rollback: true plans one step that re-points production at an earlier deployment golive
itself recorded; a deployment built by a dashboard, a Git push or a pull request is not a target,
and it touches no data, DNS, payment or email resource. Only Netlify supports these re-points
today — on Vercel you correct production in the dashboard (Vercel's adapter has no read of what
production serves). Promotion and rollback are implemented and mock-covered, not live-validated.golive teardown removes only resources it can prove it created, re-reads the DNS zone and the
host project after deleting, and names every leftover it cannot remove — Supabase and Neon
projects, the Resend sending domain, a zone or host project it cannot read — as a handoff saying
what remains and how to remove it by hand. A removal also forgets the baseline golive recorded for
that resource, so golive status does not report golive's own teardown as drift.Those answers in full: trust, access and control and recovery. The architecture is the product contract, provider scope says what each provider can do today, the validation record separates what has been exercised live from what is only mock-covered, and distribution covers installation and updates.
Install · Use GoLive · See the workflow · Alpha scope · Roadmap · Contribute
You need Node.js 20+, npm/npx, Git, and a coding agent that can load skills and run commands. Installation has been checked for Codex and Claude Code; other clients are unverified.
Install once for all your projects. Run this from any directory:
npx skills add https://github.com/mikehasa/golive-skill --skill golive --global
Select your agent when prompted: use the arrow keys to move, Space to select, and Enter to confirm. That screen is waiting for input; installation continues after you confirm.
To skip the agent picker, use the command for your agent:
# Codex
npx skills add https://github.com/mikehasa/golive-skill --skill golive --global --agent codex --yes
# Claude Code
npx skills add https://github.com/mikehasa/golive-skill --skill golive --global --agent claude-code --yes
For installation in just one project, run from that project's repository and omit --global.
Or paste this into your coding agent:
Install the GoLive skill globally so I can use it across projects:
npx skills add https://github.com/mikehasa/golive-skill --skill golive --global
Target the agent I'm using: add --agent codex --yes for Codex, or
--agent claude-code --yes for Claude Code. Keep --global.
If the agent isn't clear, ask me which one.
Verify the installation with:
node <installed-skill-dir>/scripts/golive.mjs version --json
Tell me if I need to reload skills or start a new session.
Stop after installation; don't connect accounts or deploy yet.
The install includes the instructions, provider references and prebuilt runtime. It does not connect accounts or deploy anything. See installation and updates for noninteractive agent flags, runtime verification and the optional own installer.
The same skill is published to npm as golive@0.1.0-alpha.8 (dist-tags alpha and latest), which
installs it offline, with no Git or Skills CLI involved:
# Codex
npx golive@alpha install --agent codex
# Claude Code
npx golive@alpha install --agent claude
Add --global to install into your home directory (~/.agents/skills/golive or
~/.claude/skills/golive) instead of the current project; --agent claude-code, the spelling the
Skills CLI channel uses, is accepted as well. The installer copies the complete skill the package
ships with, refuses an existing destination, and never connects provider accounts.
Both channels carry the same release. The npm package publishes the version in this repository,
including the standalone installer helpers, so an npm installation is an owned copy that updates in
place. The earlier 0.1.0-alpha.0 snapshot has no updater: remove that copy and reinstall, or use
the GitHub channel, which manages its own installs.
The npm package also exposes the terminal CLI: the golive commands npx golive@alpha help,
version, update-check, credentials, detect, menu, init, doctor, plan, teardown,
apply, verify, status and handoff (apply needs the approved plan ID and explicit
confirmation), plus the installer commands install, install-status, update, rollback,
update-policy and recover-lock for the copies it owns.
See installation and updates for
the channel's exact limits.
If you use OpenClaw, the same skill is listed on ClawHub, its public registry:
npx clawhub@latest install golive # into ./skills, recorded in .clawhub/lock.json
npx clawhub@latest update golive # later updates stay with ClawHub
ClawHub installs into the current directory's skills/ folder rather than an agent's global skills
directory, so it suits an OpenClaw workspace; Codex and Claude Code are the clients this project
verifies, through the two channels above. The registry keeps its own metadata (_meta.json,
skill-card.md, .clawhub/) beside the bundle, which golive's own integrity check ignores. See
installation and updates for the channel's limits.
Open your app repository in your coding agent. After installation, reload skills or start a new
session if GoLive does not appear. The skill's name is golive. For the standalone installation
above, type one of these in your agent's chat:
| Agent | Example prompt |
|---|---|
| Codex | $golive Help me take this app live. |
| Claude Code | /golive Help me take this app live. |
You can also ask in plain language:
Use the golive skill to take this app live. Keep the providers it already us