ghost-cms-skill

# Ghost CMS

Manage Ghost blog content, members, analytics, and newsletters through the Ghost Admin API.

## ⚠️ Security Warning

**Ghost Admin API keys provide FULL access to your Ghost site:**

- **Content Management:** Create, update, delete, publish posts and pages
- **Member Management:** Add, modify, delete members and subscriptions
- **Subscription Management:** Create, modify, delete membership tiers
- **Comment Management:** Reply to, approve, delete comments
- **User Management:** Invite, modify, delete users
- **Media Management:** Upload images and files (affects storage)
- **Site Configuration:** Modify newsletters and settings

**Published content is IMMEDIATELY PUBLIC** - be extra careful with publish operations.

**Security Best Practices:**
- **Store API keys securely** - Use 1Password CLI or secure env vars
- **Review before publishing** - Always check content before making it public
- **Never commit keys** - Keep credentials out of version control
- **Rotate keys regularly** - Create new integrations every 90 days
- **Use dedicated integrations** - Separate keys for different use cases
- **Test on staging first** - Use a test Ghost site when possible

**Admin API Key Scope:**
Ghost Admin API keys have **no scoping options** - they provide full access to everything. There are no read-only keys.

**Operation Types:**

**Read-Only Operations** (✅ Safe):
- List posts, pages, tags, members, tiers, newsletters, comments
- Get analytics and member stats
- All GET requests

**Destructive Operations** (⚠️ Modify or delete data, may be public):
- Create/update/delete posts, pages, tags (POST, PUT, DELETE)
- Publish/unpublish/schedule posts (**makes content public**)
- Create/update/delete members, tiers, newsletters
- Create replies, approve/delete comments
- Upload images (uses storage quota)
- All POST, PUT, DELETE requests

For detailed operation documentation, see [api-reference.md](references/api-reference.md).

## Quick Setup

1. **Get your Ghost Adm...

# Ghost CMS Skill for OpenClaw

> Comprehensive Ghost CMS integration for creating, publishing, scheduling, and managing blog content, newsletters, members, and analytics.

[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)

## Overview

This skill enables OpenClaw agents to interact with [Ghost CMS](https://ghost.org), the open-source publishing platform. Manage content, members, subscriptions, comments, and analytics—all via the Ghost Admin API.

**Status:** ✅ **Production Ready** (Security hardened Feb 10, 2026)  
**API Version:** Ghost Admin API v5.0  
**Hosting:** ✅ **Works with Ghost(Pro) AND self-hosted Ghost installations** (v5.0+)

## Features

✅ **Content Management** - Create, update, publish, schedule posts and pages  
✅ **Member Management** - Manage subscribers, free and paid memberships  
✅ **Subscription Management** - Create and manage pricing tiers  
✅ **Comment Management** - Reply to, approve, and moderate comments  
✅ **Newsletter Management** - Configure newsletters and email campaigns  
✅ **Analytics** - Access subscriber stats, popular content, MRR  
✅ **Media Management** - Upload images and featured images  
✅ **User Management** - Invite and manage site users  
✅ **Theme Management** - Upload, activate, switch, and manage custom themes  
✅ **Theme Validation** - Validate themes before upload using official Ghost gscan validator

## Security

**This skill includes comprehensive security controls:**

- **🔒 Autonomous invocation disabled** - Requires explicit user commands
- **📋 Capability declarations** - 8 capabilities clearly documented
- **🔑 Credential documentation** - Multiple secure storage options
- **📚 Operation classification** - ~50 operations (17 read-only, 33 destructive)
- **⚠️ Security warnings** - Prominent warnings about public publishing
- **📖 Comprehensive docs** - Complete API reference with safety guide
- **🛡️ Recovery procedures** - Undo guide for...