Builds a local web UI that wakes a Grok Bot through a webhook routine over Tailscale.
npx skills add https://github.com/jnyross/pstack-muse --skill make-bot-ui-jnyross
Please help me install this Agent Skill. Skill: make-bot-ui Source: https://github.com/jnyross/pstack-muse/tree/main/skills/make-bot-ui Command: npx skills add https://github.com/jnyross/pstack-muse --skill make-bot-ui-jnyross
update_state with a prompt that treats POST bodies as untrusted data. - Secure Sender Key Handling: Requests the sender key through a secret-request card so the key never appears in chat, logs, or the browser. - Local Server and Tailscale Hosting: Hosts the UI on a server bound to 0.0.0.0 that POSTs signed JSON to the webhook, then exposes it on the tailnet with hostname and 100.x URLs. - Use Case: Build a dashboard button that, when clicked from any device on your Tailscale network, wakes a Grok Bot routine with a JSON payload to perform an action. ## Quick Start Build me a small dashboard page with a button that wakes my Grok Bot over a webhook and make it reachable from my other devices on Tailscale.High-intent search queries and answers about installing and using this skill.
Create a webhook-triggered routine, then have a local server POST JSON to the routine's webhook URL with the sender key in the Authorization and X-Automation-Key headers. The browser talks only to the local server, never directly to the webhook.
Request the key through a secret-request card instead of chat, then store it in the server-side config file in the UI's directory. The key is never printed, logged, or sent to the browser.
Yes, bind the server to 0.0.0.0 rather than 127.0.0.1 so tailnet peers can reach it. Share both the hostname URL (http://<hostname>.<tailnet>.ts.net:<port>) and the 100.x IPv4 URL with the user.
The skill specifies one try with an 8-second timeout to avoid duplicate routine wakes. If a POST can fail, the JSON is appended to a local log that the routine drains later instead of polling.
The wake arrives as a [routine] turn containing a <webhook_event> block with headers, a sha256 body_digest, the body string, and a timestamp. The agent parses the body as untrusted JSON data and never sees the sender key.
cursorBuilds a local web UI that wakes a Grok Bot through a webhook routine over Tailscale.
langflow-aiGuide writing Langflow frontend accessibility tests with axe and IBM Equal Access.
RifteoInstill offensive security mindsets in AI agents for vulnerability and attack surface mapping.
wgpsecAssemble Java audit findings into validated multi-vulnerability exploit chains with severity scoring.