← Back to Skills Marketplace
Ci Failure Fixer
by
DanielGrobelny
· GitHub ↗
· v1.0.0
· MIT-0
99
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install ci-failure-fixer
Description
Monitor GitHub Actions CI pipelines for failures and automatically fix common issues. Use when asked to watch CI, fix build failures, monitor GitHub Actions,...
README (SKILL.md)
CI Failure Fixer
Monitor GitHub Actions for failures. Auto-fix what's fixable, report what's not.
How It Works
scripts/check-ci-failures.shpolls repos for new failed runs- If failures found → read build logs via
gh run view --log - Match error against known patterns → auto-fix if safe
- Push fix → wait 90s → verify build passes
- Report results (fixed or diagnosis-only)
Quick Start
On-demand
bash scripts/check-ci-failures.sh
Output: OK (no failures) or FAILURES with details.
As Cron Job (OpenClaw)
Set up a cron that runs every 30 minutes:
- Script:
bash scripts/check-ci-failures.sh - Model: Haiku (cheap, sufficient)
- On failure: Read logs, attempt auto-fix, report
Configuration
Environment variables:
GITHUB_OWNER— GitHub username (auto-detected fromghif not set)CI_REPOS— Space-separated repo names (auto-discovers all repos if not set)CI_STATE_FILE— Path to state JSON (tracks last check time)
Auto-Fixable Patterns
| Pattern | Detection | Fix |
|---|---|---|
| Dependency issues | npm ERR! Could not resolve |
npm install + push |
| Test snapshots | Snapshot mismatch |
npm test -- --update + push |
| Lint errors | eslint, Formatting |
eslint --fix + push |
| E2E snapshots | Playwright snapshot diff | playwright --update-snapshots + push |
Report-Only (Human Needed)
- Token/auth errors (secrets rotation)
- TypeScript errors (complex type issues)
- Build timeouts (resource/loop issues)
- Unknown errors
Fix Patterns Reference
Read references/fix-patterns.md for detailed decision tree, log reading commands, and all known patterns with fix scripts.
Reading Logs
# Latest failed run logs
gh run view --repo OWNER/REPO --log 2>&1 | tail -50
# Filter for errors
gh run view \x3Crun-id> --repo OWNER/REPO --log 2>&1 | grep -A5 "error\|FAIL"
After Fixing
Always verify the fix worked:
sleep 90 # Wait for new CI run
gh run list --repo OWNER/REPO --limit 1 --json conclusion -q '.[0].conclusion'
# Should be "success"
Usage Guidance
This skill is ambiguous: the script only discovers and reports failed CI runs, but the prose and reference file instruct the agent to run commands that modify repositories and push commits (npm install, eslint --fix, update snapshots, git commit/push). Before installing or enabling this skill, consider the following:
- Assume the agent will need a GitHub-authenticated 'gh' session with write access to repos to perform the described auto-fixes. If you enable it, restrict the token/account to only the specific repos it should touch (use a PAT scoped to specific repositories rather than a broad user token).
- Limit CI_REPOS to a small test repository or mirror first; do not rely on auto-discovery of 'all repos' while testing.
- Require a human-in-the-loop: prefer dry-run or require explicit confirmation before any commit/push. The skill's language gives broad discretion to 'auto-fix if safe' which can lead to unintended code changes.
- Review references/fix-patterns.md and the exact commands the agent would run; test them locally on a clone to see their effects.
- If you want only monitoring (no auto-fix), use the script as-is but disable or remove any automation steps that perform git commit/push or modify source files.
Because of the undeclared credential needs, auto-push capability, and open-ended instructions, treat this skill as suspicious until you can enforce tight scoping and human approval policies.
Capability Analysis
Type: OpenClaw Skill
Name: ci-failure-fixer
Version: 1.0.0
The skill implements a high-risk CI auto-fixer that automatically modifies source code and performs 'git push' across all user repositories discovered via the 'gh' CLI. While the behavior is aligned with the stated purpose, it possesses significant high-risk capabilities, including broad write access to multiple projects and the execution of build tools (npm, npx, git) based on the content of CI logs, which could be manipulated by an attacker to trigger unintended actions. The instructions to run this as an automated cron job further elevate the risk profile (SKILL.md, scripts/check-ci-failures.sh, references/fix-patterns.md).
Capability Assessment
Purpose & Capability
The skill claims to detect and automatically fix GitHub Actions failures and to push fixes. The packaged script (scripts/check-ci-failures.sh) only discovers failed runs and reports them; there is no implementation of automated modification/commit logic in the repository. SKILL.md and references/fix-patterns.md describe running npm/eslint/playwright and committing changes — which would require local repo clones, git access, node tooling, and push permissions — but these required capabilities are not declared in the skill metadata (no required binaries, no required env, no credential declared). This is an incoherence: either the skill will only report failures (safe-ish) or the agent is expected to execute potentially destructive repo-modifying commands (high privilege) — the package doesn't make which of these will actually happen explicit.
Instruction Scope
Instructions direct the agent to read logs (gh run view), match against error patterns, and 'auto-fix if safe' by running commands like npm install, eslint --fix, or updating snapshots and pushing commits. They also recommend running as a cron job and rely on environment variables (GITHUB_OWNER, CI_REPOS, CI_STATE_FILE) that are not enumerated in the skill's declared requirements. The phrasing gives broad discretion to the agent ('auto-fix if safe' and 'TRY fix, push if confident'), which is open-ended and could lead to unintended code changes or excessive repo access unless human approval and strict safeguards are enforced.
Install Mechanism
No install spec — instruction-only plus a small script — so nothing is downloaded or installed by the skill itself. This minimizes supply-chain/install risk. However, runtime relies on external tooling (gh, python3, git, npm/node, eslint, playwright) that are not managed by an installer here.
Credentials
Metadata declares no required environment variables or primary credential, but SKILL.md and the script require gh CLI authentication and optional env vars (GITHUB_OWNER, CI_REPOS, CI_STATE_FILE). More importantly, auto-fix behaviors described would require push/write permissions to repositories (a GitHub token or gh-authenticated user with repo write access). These sensitive permissions are not listed or scoped, and auto-discovery of 'all repos' risks operating across many repositories the account can access. The skill also writes a state file under $HOME (~/.openclaw/workspace/memory/ci-check-state.json) without declaring that file access in metadata.
Persistence & Privilege
always:false (good). The skill is allowed to be invoked autonomously (platform default), which combined with the instructions to auto-fix and push code increases blast radius. The script writes a state file into the user's home workspace, and the skill is intended to run on a cron schedule. Those are moderate privileges for this purpose but are not excessive by themselves — the real risk is autonomous code changes/pushes described elsewhere in the instructions.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install ci-failure-fixer - After installation, invoke the skill by name or use
/ci-failure-fixer - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: GitHub Actions CI failure monitor with auto-fix for dependency issues, snapshot mismatches, lint errors, and E2E failures. Includes check script, fix pattern reference, and cron integration guide.
Metadata
Frequently Asked Questions
What is Ci Failure Fixer?
Monitor GitHub Actions CI pipelines for failures and automatically fix common issues. Use when asked to watch CI, fix build failures, monitor GitHub Actions,... It is an AI Agent Skill for Claude Code / OpenClaw, with 99 downloads so far.
How do I install Ci Failure Fixer?
Run "/install ci-failure-fixer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Ci Failure Fixer free?
Yes, Ci Failure Fixer is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Ci Failure Fixer support?
Ci Failure Fixer is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Ci Failure Fixer?
It is built and maintained by DanielGrobelny (@danielgrobelny); the current version is v1.0.0.
More Skills