← Back to Skills Marketplace
andy825lay-tech

GitHub Automation Pro

by andy825lay-tech · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1144
Downloads
1
Stars
7
Active Installs
1
Versions
Install in OpenClaw
/install github-automation-pro
Description
Automate GitHub tasks including advanced issue management, PR analysis, release creation with notes, repo stats, webhook triggers, and email support.
README (SKILL.md)

SkillForge - GitHub Automation Skill

OpenClaw Skill for GitHub Automation
版本:1.0.0
定價:Lite $20 / Pro $50 / Enterprise $200


🚀 快速開始

import { createGitHubSkill, SkillConfigBuilder } from '@skillforge/github-automation';

// 建立配置
const config = new SkillConfigBuilder()
  .setGitHubToken('ghp_your_token_here')
  .setDefaultOwner('your-org')
  .setDefaultRepo('your-repo')
  .enableAllFeatures()
  .build();

// 初始化 Skill
const skill = createGitHubSkill();
await skill.initialize(config);

// 建立 Issue
const result = await skill.execute({
  action: 'issue.create',
  params: {
    title: 'Bug Report',
    body: 'Something is broken...',
    labels: ['bug', 'priority-high'],
    assignees: ['developer'],
  },
});

console.log(`Issue created: ${result.data.url}`);

📦 安裝

npm install @skillforge/github-automation

✨ 功能特性

Issue 自動化

  • ✅ 建立 Issue(支援標籤、指派)
  • ✅ 列出 Issue(篩選狀態、標籤、指派者)
  • ✅ 更新 Issue(標題、內容、狀態、標籤)
  • ✅ 自動分類與標籤建議

PR 審查輔助

  • ✅ PR 摘要分析
  • ✅ 檔案變更統計
  • ✅ 審查清單生成
  • ✅ 衝突檢測

Release 自動化

  • ✅ 建立 Release
  • ✅ 自動生成 Release Notes
  • ✅ Draft/Pre-release 支援

Repo 分析

  • ✅ 統計數據(Stars, Forks, Issues)
  • ✅ 健康度評分(基於更新頻率、文件完整性)
  • ✅ Rate Limit 監控

💰 版本比較

功能 Lite (USDT 20) Pro (USDT 50) Enterprise (USDT 200)
Issue 自動化
PR 分析 基礎 完整 完整
Release 自動化
Repo 統計 基礎 完整 完整
Webhook 觸發
多 Repo 支援
自定義規則
優先支援 郵件 專屬頻道

🔐 授權驗證

本 Skill 採用 License Key 驗證機制:

// 購買後取得的 License Key
const config = new SkillConfigBuilder()
  .setGitHubToken('ghp_xxx')
  .setLicenseKey('SF-GH-XXXX-XXXX-XXXX')  // 購買後提供
  .build();

💳 付款方式

僅接受 USDT (TRC-20)

  • 錢包地址:TALc5eQifjsd4buSDRpgSiYAxUpLNoNjLD
  • 網路:僅限 TRC-20,請勿使用其他網路
  • 手續費:免費
  • 到帳時間:即時

購買流程

  1. 選擇版本(Lite / Pro / Enterprise)
  2. 轉帳 USDT 至上方地址
  3. 截圖付款記錄
  4. 發送截圖 + 您的 Email 至 Telegram: @gousmaaa
  5. 24 小時內收到 License Key

🎁 推薦有賞計畫

推薦朋友購買,雙方各得 USDT 5 回饋!

如何參與

  1. 購買後取得你的專屬推薦碼(隨 License Key 發送)
  2. 分享給朋友,請他在購買時提供你的推薦碼
  3. 確認收貨後,雙方各獲得 USDT 5 回饋

無上限推薦

  • 推薦 4 位朋友 = 免費獲得 Lite 版
  • 推薦 10 位朋友 = 免費獲得 Pro 版
  • 推薦 40 位朋友 = 免費獲得 Enterprise 版

範例

小陳購買 Pro 版 (USDT 50),取得推薦碼 "SF-CHEN-001"
小陳推薦給小王,小王購買時提供推薦碼 "SF-CHEN-001"
→ 小陳獲得 USDT 5
→ 小王獲得 USDT 5(等於只付 USDT 45)

🛠️ 開發

# 安裝依賴
npm install

# 編譯
npm run build

# 測試
npm test

# 開發模式
npm run dev

📝 範例

自動標記 Bug Issue

await skill.execute({
  action: 'issue.create',
  params: {
    title: '[BUG] 登入失敗',
    body: '## 問題描述\
無法使用 GitHub 登入',
    labels: ['bug', 'auth'],
    assignees: ['backend-team'],
  },
});

分析 PR

const analysis = await skill.execute({
  action: 'pr.analyze',
  params: {
    pullNumber: 42,
  },
});

console.log(`變更檔案: ${analysis.data.changedFiles}`);
console.log(`新增行數: ${analysis.data.additions}`);
console.log(`刪除行數: ${analysis.data.deletions}`);

建立 Release

await skill.execute({
  action: 'release.create',
  params: {
    tagName: 'v1.0.0',
    name: 'Version 1.0.0',
    generateReleaseNotes: true,
  },
});

🔒 安全性

  • Token 絕不會離開本地環境
  • 所有 API 呼叫使用 HTTPS
  • 支援 Rate Limit 自動節流
  • 敏感資料記憶體加密

📄 授權

MIT License - 詳見 LICENSE 檔案

注意:核心程式碼已混淆處理,僅授權使用,禁止反編譯。


🤝 支援

  • Lite 版:GitHub Issues
  • Pro 版:Email 支援 ([email protected])
  • Enterprise:專屬 Slack 頻道

SkillForge - 專業級 OpenClaw Skills

Usage Guidance
Do not install or trust this skill yet. Before proceeding, ask the publisher for an authoritative source (public repo or verified homepage) and for a clear explanation of why Supabase/puppeteer/node-fetch are needed. Request unobfuscated source or a reproducible build so you can audit network calls and license verification behavior. Never provide your primary GitHub token to untrusted code — if you test, use a least‑privilege or ephemeral token scoped only to a test repository. Treat the USDT/Telegram payment instructions as a red flag; prefer skills from verifiable vendors or the official GitHub Marketplace. If you must evaluate it: run it in a sandboxed VM or container with no sensitive tokens, monitor outbound network connections, and search the code for calls that send data to third‑party hosts (Supabase, custom URLs, Telegram endpoints, or hard‑coded wallet addresses). If the publisher cannot satisfactorily justify obfuscation and external dependencies, avoid using the skill.
Capability Analysis
Type: OpenClaw Skill Name: github-automation-pro Version: 1.0.0 This skill bundle is classified as suspicious due to several critical indicators. Firstly, the `SKILL.md` explicitly details an off-platform monetization scheme involving direct USDT (TRC-20) payments to a specific wallet address and license key distribution via Telegram, bypassing standard platform review and payment systems. Secondly, the `SKILL.md` and `package.json` openly declare, and the `.js` files confirm, heavy code obfuscation, with `SKILL.md` even prohibiting reverse engineering, which severely hinders transparency and security analysis. Lastly, the `package.json` includes highly suspicious dependencies like `@supabase/supabase-js` (a backend client) and `puppeteer` (a headless browser), which are unusual for a GitHub API automation skill and provide capabilities for potential data exfiltration, unauthorized web interaction, or command-and-control (C2) communication beyond the stated purpose. While direct malicious execution is not confirmed without deobfuscation, the combination of off-platform sales, intentional obfuscation, and powerful, unusual dependencies strongly suggests an intent to hide potentially harmful or unauthorized functionality.
Capability Assessment
Purpose & Capability
The code and SKILL.md implement GitHub automation (issues, PR analysis, releases) which fits the name. However the package pulls in heavy/odd dependencies (@supabase/supabase-js, puppeteer, node-fetch) that are not obviously required for the stated features; the README/SKILL.md require a GitHub token/license key although registry metadata lists no required env vars — this mismatch is disproportionate and unexplained.
Instruction Scope
SKILL.md contains normal usage examples for GitHub operations but also instructs users to pay USDT to a wallet and contact a Telegram account for a license key. It claims tokens never leave the local environment, yet also states core code is obfuscated — that combination and the off‑platform payment flow broaden the runtime scope and privacy/financial risk for users.
Install Mechanism
There is no install spec in the registry (instruction-only), but the package includes many source files and a package.json listing nontrivial dependencies. Several JS files are intentionally obfuscated (variable mangling), obscuring runtime behavior. Obfuscated source in a credential‑handling skill is a significant risk and reduces ability to audit what the code does.
Credentials
SKILL.md and code clearly expect a GitHub Personal Access Token and a license key, but the registry lists no required env vars or primary credential — a transparency mismatch. The presence of @supabase/supabase-js and node-fetch suggests potential remote network interactions beyond GitHub (e.g., storing or verifying license keys remotely), which would not be proportionate to a minimal GitHub automation library unless explicitly documented.
Persistence & Privilege
The skill does not request always:true and is user-invocable (normal). It could run code with network access and dependencies when invoked. Because core files are obfuscated, it’s harder to confirm the skill won't perform unexpected persistent actions or remote calls during execution — so exercise caution even though no explicit elevated persistence flags are present.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install github-automation-pro
  3. After installation, invoke the skill by name or use /github-automation-pro
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of SkillForge GitHub Automation Skill. - Automates GitHub Issues (create, list, update, categorize). - Assists with PR review (summary analysis, changed file stats, review checklist, conflict checks). - Supports Release automation (create releases, auto release notes, draft/pre-release). - Provides repo analytics (statistics, health scoring, rate limit alerts). - Multiple paid plans (Lite, Pro, Enterprise) with feature comparison. - License key authentication and USDT (TRC-20) payment-only. - Offers referral rewards and dedicated support channels per plan.
Metadata
Slug github-automation-pro
Version 1.0.0
License
All-time Installs 8
Active Installs 7
Total Versions 1
Frequently Asked Questions

What is GitHub Automation Pro?

Automate GitHub tasks including advanced issue management, PR analysis, release creation with notes, repo stats, webhook triggers, and email support. It is an AI Agent Skill for Claude Code / OpenClaw, with 1144 downloads so far.

How do I install GitHub Automation Pro?

Run "/install github-automation-pro" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is GitHub Automation Pro free?

Yes, GitHub Automation Pro is completely free (open-source). You can download, install and use it at no cost.

Which platforms does GitHub Automation Pro support?

GitHub Automation Pro is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created GitHub Automation Pro?

It is built and maintained by andy825lay-tech (@andy825lay-tech); the current version is v1.0.0.

💬 Comments