← Back to Skills Marketplace
18594
Downloads
10
Stars
185
Active Installs
7
Versions
Install in OpenClaw
/install openclaw-github-assistant
Description
Query and manage GitHub repositories - list repos, check CI status, create issues, search repos, and view recent activity.
Usage Guidance
Review before installing. Use a fine-grained GitHub token limited to the repositories and permissions you actually need, avoid broad classic repo scope when possible, and require the agent to show the exact repository, title, body, branches, visibility, and any extra issue fields before creating issues, repositories, or pull requests.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-github-assistant
Version: 2.0.1
The skill is generally well-behaved, providing GitHub integration capabilities and including responsible security warnings in its documentation (SKILL.md, README.md). It correctly handles GitHub tokens from environment variables or OpenClaw config and communicates only with api.github.com. However, the `create_issue` action in `index.js` defines an `extra` parameter of type `object` without further schema validation. This `extra` object is directly spread into the JSON body of the GitHub API request in `api.js`. This vulnerability could allow a sophisticated prompt injection attack against the AI agent to inject arbitrary fields into the GitHub issue creation request, potentially leading to unintended actions (e.g., adding assignees or labels not explicitly requested by the user) if the token has the necessary scopes. This is a vulnerability, not evidence of intentional malice by the skill developer.
Capability Assessment
Purpose & Capability
Listing repositories, checking CI, creating issues, and creating repositories fit the GitHub assistant purpose and are mostly disclosed, but the exported create_pull_request action is present in code and types while absent from the main README and SKILL capability lists.
Instruction Scope
The skill can create issues, repositories, and pull requests through authenticated POST requests using ambient credentials, with no explicit confirmation or preview step in the implementation; create_issue also passes an unrestricted extra object into the GitHub API body.
Install Mechanism
No install script, dependency installer, obfuscation, or setup-time execution was found. Package metadata has minor quality issues, including duplicate package.json keys and a version mismatch between package.json and exported skill metadata.
Credentials
GitHub token and username access are expected for this integration and are declared in SKILL.md metadata; outbound API use appears limited to api.github.com, but the documented classic repo scope can grant broad private repository authority.
Persistence & Privilege
No background worker, local indexing, privilege escalation, or self-persistence was found. Persistence is limited to user-provided environment/config credentials and an in-memory cached username.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-github-assistant - After installation, invoke the skill by name or use
/openclaw-github-assistant - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.1
**Expanded TypeScript and API Support in v2.0.1**
- Added type definitions and API modules: `api.d.ts`, `api.js`, `index.d.ts`, `types.d.ts`, and `types.js`
- Updated main skill logic and package metadata in `index.js` and `package.json`
- Improved maintainability and type safety for developers integrating with the skill
v2.0.0
Refactored to TypeScript - Better type safety and IDE support. All functions tested and working.
v1.0.4
Added create_pull_request feature - Now you can create PRs from conversation!
v1.0.3
Added create_repo feature - Now you can create new repositories directly from conversation!
v1.0.2
Added test suite with 7 tests. Fixed registry metadata to declare required credentials (GITHUB_TOKEN, GITHUB_USERNAME).
v1.0.1
Fixed credential handling: Code now properly reads GITHUB_TOKEN and GITHUB_USERNAME from environment variables.
v1.0.0
Initial release: List repos, check CI status, create issues, search repos, view recent activity
Metadata
Frequently Asked Questions
What is OpenClaw GitHub Assistant?
Query and manage GitHub repositories - list repos, check CI status, create issues, search repos, and view recent activity. It is an AI Agent Skill for Claude Code / OpenClaw, with 18594 downloads so far.
How do I install OpenClaw GitHub Assistant?
Run "/install openclaw-github-assistant" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OpenClaw GitHub Assistant free?
Yes, OpenClaw GitHub Assistant is completely free (open-source). You can download, install and use it at no cost.
Which platforms does OpenClaw GitHub Assistant support?
OpenClaw GitHub Assistant is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OpenClaw GitHub Assistant?
It is built and maintained by conorkenn (@conorkenn); the current version is v2.0.1.
More Skills