← Back to Skills Marketplace
nimit2801

DevRev

by Nimit Savant · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
578
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install devrev
Description
Interact with DevRev to create/update issues and tickets, and search/query works and parts. Use when asked to create a DevRev issue or ticket, update an exis...
README (SKILL.md)

DevRev Skill

Interact with DevRev via its REST API to manage issues, tickets, and parts.

Setup

Requires a DevRev PAT token. Read from env var DEVREV_TOKEN or ask the user to provide it.

export DEVREV_TOKEN=\x3Cyour-pat-token>

Base URL: https://api.devrev.ai Auth header: Authorization: \x3Ctoken> (no "Bearer" prefix needed)

Common Operations

List Works (issues + tickets)

curl -s "https://api.devrev.ai/works.list" \
  -H "Authorization: $DEVREV_TOKEN" | python3 -m json.tool

Filter by type:

# Only issues
curl -s "https://api.devrev.ai/works.list?type[]=issue" \
  -H "Authorization: $DEVREV_TOKEN"

# Only tickets  
curl -s "https://api.devrev.ai/works.list?type[]=ticket" \
  -H "Authorization: $DEVREV_TOKEN"

Get a Specific Work Item

# Get by DON ID
curl -s -X POST "https://api.devrev.ai/works.get" \
  -H "Authorization: $DEVREV_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"id": "don:core:dvrv-us-1:devo/XXXX:issue/72"}'

Create an Issue

curl -s -X POST "https://api.devrev.ai/works.create" \
  -H "Authorization: $DEVREV_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "type": "issue",
    "title": "Issue title",
    "body": "Description here",
    "applies_to_part": "don:core:...:product/X",
    "owned_by": ["don:identity:...:devu/1"]
  }'

Create a Ticket

curl -s -X POST "https://api.devrev.ai/works.create" \
  -H "Authorization: $DEVREV_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "type": "ticket",
    "title": "Ticket title",
    "body": "Description here",
    "applies_to_part": "don:core:...:product/X",
    "severity": "medium"
  }'

Severity options: blocker, high, medium, low

Update a Work Item

curl -s -X POST "https://api.devrev.ai/works.update" \
  -H "Authorization: $DEVREV_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "id": "don:core:...:issue/72",
    "title": "Updated title",
    "body": "Updated description"
  }'

Search Works

curl -s -X POST "https://api.devrev.ai/works.list" \
  -H "Authorization: $DEVREV_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "type": ["issue"],
    "stage": {"name": ["triage", "in_development"]}
  }'

List Parts (products, features, enhancements)

curl -s "https://api.devrev.ai/parts.list" \
  -H "Authorization: $DEVREV_TOKEN"

Key Data Structures

See references/api.md for full field details and DON ID format.

Tips

  • DON IDs are the full don:core:... identifiers used for all references
  • display_id (e.g. ISS-72, TKT-29) is human-readable but use the DON ID for API calls
  • To get parts (products) for creating works, call parts.list first
  • Priority for issues: p0 (critical) → p1p2p3
  • Stage names for issues: triage, in_development, completed
  • Stage names for tickets: queued, work_in_progress, resolved
Usage Guidance
This skill appears to be a straightforward DevRev API helper, but there are two things to check before installing: (1) the SKILL.md requires a DEVREV_TOKEN PAT but the registry metadata lists no required credential — verify whether the platform will prompt securely for the token or whether you must paste it into the agent manually; (2) the skill's source/homepage are unknown, so prefer obtaining an official skill from a trusted publisher. If you proceed, use a DevRev PAT with the minimal scopes needed, store it in a secure secret store (avoid pasting into chat), rotate/revoke tokens if needed, and consider testing with a low-privilege or test org account first. If the registry metadata can be corrected (adding DEVREV_TOKEN as required) and the author/source is verifiable, the risk is much lower.
Capability Analysis
Type: OpenClaw Skill Name: devrev Version: 1.0.0 The skill bundle is benign. It provides instructions and examples for interacting with the legitimate DevRev API using `curl` commands. It correctly retrieves the `DEVREV_TOKEN` from an environment variable for authentication and directs all network traffic to `https://api.devrev.ai`. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation. All actions are clearly aligned with the stated purpose of managing DevRev issues and tickets.
Capability Assessment
Purpose & Capability
The SKILL.md clearly implements a DevRev REST API client (works.list, works.create, works.update, parts.list, etc.), which matches the skill's name and description. However, the registry metadata lists no required environment variables or primary credential while the SKILL.md explicitly requires a DEVREV_TOKEN PAT. That metadata omission is an inconsistency (could be a packaging error) and may prevent the platform from prompting for the token correctly.
Instruction Scope
Runtime instructions are limited to calling https://api.devrev.ai endpoints with curl and using the DEVREV_TOKEN for Authorization; they do not instruct reading arbitrary files, scanning the host, or sending data to other endpoints. The instructions stay within the expected DevRev integration scope.
Install Mechanism
This is an instruction-only skill with no install spec and no code files to be written or executed on disk, which minimizes install-time risk.
Credentials
The SKILL.md requires a DevRev PAT (DEVREV_TOKEN), which is proportionate for the described API operations. The problem is that the skill's declared registry requirements list no environment variables or primary credential — a discrepancy that could lead to the token being requested ad-hoc or mishandled. Confirming least-privilege scopes for the PAT is recommended.
Persistence & Privilege
The skill does not request always:true and is user-invocable, with autonomous invocation allowed (the platform default). There is no evidence the skill modifies other skills or system settings. Note: because the source is unknown, autonomous invocation combined with missing metadata increases risk modestly, but not enough to mark this malicious.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install devrev
  3. After installation, invoke the skill by name or use /devrev
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: create/update issues & tickets, search works and parts
Metadata
Slug devrev
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is DevRev?

Interact with DevRev to create/update issues and tickets, and search/query works and parts. Use when asked to create a DevRev issue or ticket, update an exis... It is an AI Agent Skill for Claude Code / OpenClaw, with 578 downloads so far.

How do I install DevRev?

Run "/install devrev" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is DevRev free?

Yes, DevRev is completely free (open-source). You can download, install and use it at no cost.

Which platforms does DevRev support?

DevRev is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created DevRev?

It is built and maintained by Nimit Savant (@nimit2801); the current version is v1.0.0.

💬 Comments