myfirstgit

Interact with GitHub via CLI to list repositories, issues, pull requests, and create new issues in your repositories.

This skill appears to be a thin wrapper around the GitHub CLI, which is a plausible purpose — but there are a few red flags you should consider before installing: - Metadata mismatch: the embedded _meta.json and origin.json use a different slug/owner than the registry metadata for this skill. That can indicate a sloppy copy/paste or incorrect publishing. Verify the author and provenance before trusting the skill. - Undeclared dependencies: SKILL.md says 'gh' (GitHub CLI) and Node.js are required, but the registry entry doesn't declare required binaries. Make sure 'gh' is installed and authenticated locally before use. - Implicit credential use: the skill will rely on your local gh authentication (tokens or SSH keys stored on your system). If you install this skill, it can execute gh commands that act with your GitHub identity (create issues, list private repos, etc.). Only install if you trust the author and are comfortable with the agent using your local GitHub credentials. If you want to proceed safely: ask the publisher to fix the metadata, explicitly declare required binaries and any environment variables, and/or modify the skill to require an explicit GITHUB_TOKEN (and document its scope). If you do not trust the author, avoid installing or restrict the skill from autonomous invocation.

Type: OpenClaw Skill Name: myfirstgit Version: 1.0.0 The skill bundle provides standard GitHub interaction capabilities by mapping AI agent instructions to the official GitHub CLI (gh). It includes basic commands for managing repositories, issues, and pull requests as described in SKILL.md. No malicious code, data exfiltration logic, or prompt injection attempts were found.