Pilot Github Bridge

Bridge GitHub webhook events as Pilot Protocol events. Use this skill when: 1. You need to receive GitHub events in Pilot agents 2. You want to trigger agent...

Before installing or running this skill: (1) Ask the author to clarify and correct the declared requirements — explicitly list pilotctl, python3, jq, sed if the examples require them, and remove gh from Dependencies unless it is actually used. (2) Require explicit handling of GitHub webhook secrets: the workflow must validate X-Hub-Signature / X-Hub-Signature-256 (or equivalent) before acting on events; do not accept unsigned webhooks. (3) Avoid running the daemon with --public unless you understand and control network exposure; prefer binding to localhost or using a secured relay and firewall rules. (4) Run the relay and processing loop on an isolated host/container with least privilege, enable logging/auditing, and add rate-limiting and input validation to avoid command injection or forged events. (5) If you need guarantees, request a revised SKILL.md that lists exact required binaries, any needed environment variables (e.g., WEBHOOK_SECRET, PILOT_AUTH token), and explicit security steps (signature verification and auth). If the author cannot clarify these inconsistencies, treat the skill as risky and avoid deploying it in production.

Type: OpenClaw Skill Name: pilot-github-bridge Version: 1.0.0 The skill bundle provides documentation and bash examples for bridging GitHub webhooks to the Pilot Protocol using the 'pilotctl' utility. The instructions in SKILL.md are consistent with the stated purpose of CI/CD integration and event processing, showing no signs of data exfiltration, malicious execution, or prompt injection attacks.