← Back to Skills Marketplace
qfann

release-checker

by QFann · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
91
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install release-checker
Description
一体化发版兼容性检查工具。自动分析 Git diff 检测发版兼容性,通过代码智能识别推送中心/Gateway/配置变更,自动检测 SQL 脚本兼容性并生成多数据库版本,输出完整的 TODO 清单和 Markdown 报告。
Usage Guidance
This skill appears to do what it says: it will run git diff and a local Python script that inspects and converts SQL files. Before using it: (1) ensure you trust the included script (review scripts/release_checker.py) because it will read and operate on your repository files; (2) run it in a controlled environment (container or dedicated runner) if you are cautious; (3) install the dependency sqlglot (requirements.txt) in a virtualenv before execution; and (4) be aware it executes subprocesses (git/python) against the project — that is expected behavior, not an unexplained network exfiltration attempt.
Capability Analysis
Type: OpenClaw Skill Name: release-checker Version: 1.0.0 The skill bundle provides a comprehensive tool for Java release compatibility checking, but it contains a shell injection vulnerability in `scripts/release_checker.py`. Specifically, the `compare_branch` argument is used to construct a shell command in `GitAnalyzer.get_changed_files` without sanitization, which could allow arbitrary command execution if a malicious branch name is provided. While the `SKILL.md` instructions are highly prescriptive regarding the agent's workflow and user interaction, they do not appear to contain malicious prompt injections or instructions for data exfiltration.
Capability Assessment
Purpose & Capability
Name/description (release compatibility, git-diff, SQL conversion) match the included SKILL.md and the Python script. Required tools (git, python) and file access are appropriate for the stated functionality; no credentials or unrelated services are requested.
Instruction Scope
Runtime instructions only ask the agent to run git diff, list/inspect changed files, interactively ask the user which components to process, and call the included Python script on project files. The script reads repository files and transforms SQL — these actions are within the declared scope. Note: the skill will access the project filesystem and execute git/python locally, which is expected but should be noted by users.
Install Mechanism
There is no install spec (instruction-only), but the bundle includes a Python script and requirements.txt listing sqlglot. The environment must have Python and sqlglot installed; the skill does not automatically install dependencies. This is a low-to-moderate operational note (user or host must provide the runtime dependency).
Credentials
The skill requests no environment variables, credentials, or config paths. It operates on repository files and user-supplied paths only. There are no demands for unrelated tokens/keys — proportional to purpose.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent or elevated platform privileges. Autonomous invocation is allowed (platform default) but is not coupled with other red flags.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install release-checker
  3. After installation, invoke the skill by name or use /release-checker
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Release-checker 1.0.0 初始版本发布: - 新增一体化发版兼容性检查功能,自动分析 Git diff 变更内容。 - 支持自动智能识别推送中心、Gateway、配置变更等核心组件。 - 内置 SQL 兼容性检测及 MySQL → PostgreSQL/Oracle 自动转换,包含多项规则校验。 - 自动生成详细的 TODO 清单和 Markdown 发版兼容性报告。 - 支持 MyBatis-Plus、Spring Cloud、Java 及多数据库项目场景。 - 提供便捷的用户交互,辅助确认和补充变更详情。
Metadata
Slug release-checker
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is release-checker?

一体化发版兼容性检查工具。自动分析 Git diff 检测发版兼容性,通过代码智能识别推送中心/Gateway/配置变更,自动检测 SQL 脚本兼容性并生成多数据库版本,输出完整的 TODO 清单和 Markdown 报告。 It is an AI Agent Skill for Claude Code / OpenClaw, with 91 downloads so far.

How do I install release-checker?

Run "/install release-checker" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is release-checker free?

Yes, release-checker is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does release-checker support?

release-checker is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created release-checker?

It is built and maintained by QFann (@qfann); the current version is v1.0.0.

💬 Comments