← Back to Skills Marketplace
109
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pr-pilot
Description
Submit professional pull requests and manage their full lifecycle — from push to merge. Covers PR creation with structured descriptions, CI monitoring, revie...
Usage Guidance
This skill appears to be a legitimate PR workflow, but the published metadata fails to declare that it needs the GitHub CLI and a GH_TOKEN. Before installing or running it: (1) verify you or the agent will only provide a least-privilege GitHub token (restrict scopes to what's necessary, e.g., repo: statuses if possible), (2) prefer running the gh/git commands yourself in a local clone rather than handing your token to an automated agent, (3) confirm the agent will not exfiltrate tokens or run commands on unrelated repos, (4) inspect any prompts or generated /tmp/pr_body.md content before allowing push/create actions, and (5) ask the skill author/registry to update the metadata to explicitly declare required binaries (gh) and required env (GH_TOKEN, GITHUB_USERNAME) so the runtime expectations match what the skill actually does.
Capability Analysis
Type: OpenClaw Skill
Name: pr-pilot
Version: 1.0.0
The 'pr-pilot' skill is a legitimate tool designed to automate the GitHub Pull Request lifecycle using the GitHub CLI (gh). It provides structured instructions for committing code, creating PRs with detailed templates, monitoring CI status, and managing review responses. While it requires a GitHub token for operation, this is standard for the task, and there is no evidence of data exfiltration, malicious execution, or prompt injection in SKILL.md.
Capability Assessment
Purpose & Capability
The skill's stated purpose (create and manage GitHub PRs) legitimately requires Git and the GitHub CLI plus a GitHub token; the instructions reflect that. However, the registry metadata lists no required binaries or environment variables, which is inconsistent with the actual runtime needs.
Instruction Scope
SKILL.md instructs the agent/user to run git and gh commands, push branches, create PR bodies in /tmp/pr_body.md, and to obtain/set a GH_TOKEN and GitHub username. Those instructions are within the PR-management purpose, but they reference an environment secret (GH_TOKEN) and local repo operations even though those were not declared in the skill manifest — a scope mismatch that could be surprising to users or to automated policy checks.
Install Mechanism
This is an instruction-only skill with no install spec and no code files. That reduces risk from hidden downloads or installs; nothing is written to disk by the skill package itself.
Credentials
Although the runtime requires a GitHub personal access token and a username, the skill did not declare any required environment variables or a primary credential. A GH token grants access to repositories and (depending on scopes) can modify code — requesting or using such a token should be declared explicitly and scoped minimally.
Persistence & Privilege
The skill does not request always: true, does not install persistent components, and is user-invocable. Agent autonomous invocation is allowed by default (disable-model-invocation=false) but that is expected platform behavior and not, by itself, an additional red flag here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pr-pilot - After installation, invoke the skill by name or use
/pr-pilot - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of **pr-pilot**, a skill for professional pull request (PR) submission and management.
- Guides users through structured PR creation, including templates for descriptions, root cause analysis, and file change summaries.
- Details best practices for CI monitoring, responding to code reviews, and managing iterative code changes.
- Includes practical shell workflows and GitHub CLI commands for the full PR lifecycle: push, open, review, iterate, and merge.
- Provides review response patterns and troubleshooting for CI, merge conflicts, and feedback incorporation.
- Offers organizational tools for tracking multiple open PRs across repositories.
Metadata
Frequently Asked Questions
What is pr-pilot?
Submit professional pull requests and manage their full lifecycle — from push to merge. Covers PR creation with structured descriptions, CI monitoring, revie... It is an AI Agent Skill for Claude Code / OpenClaw, with 109 downloads so far.
How do I install pr-pilot?
Run "/install pr-pilot" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is pr-pilot free?
Yes, pr-pilot is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does pr-pilot support?
pr-pilot is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created pr-pilot?
It is built and maintained by Bijin (@sliverp); the current version is v1.0.0.
More Skills