← 返回 Skills 市场
Azure DevOps
作者
PALs-Software
· GitHub ↗
· v1.0.0
1798
总下载
2
收藏
10
当前安装
1
版本数
在 OpenClaw 中安装
/install azure-devops
功能描述
List Azure DevOps projects, repositories, and branches; create pull requests; manage work items; check build status. Use when working with Azure DevOps resources, checking PR status, querying project structure, or automating DevOps workflows.
使用说明 (SKILL.md)
Azure DevOps Skill
List projects, repositories, branches. Create pull requests. Manage work items. Check build status.
Check before running for valid Configuration, if values missing ask the user!
Required:
AZURE_DEVOPS_PAT: Personal Access TokenAZURE_DEVOPS_ORG: Organization name
If values are missing from ~/.openclaw/openclaw.json, the agent should:
- ASK the user for the missing PAT and/or organization name
- Store them in
~/.openclaw/openclaw.jsonunderskills.entries["azure-devops"]
Example Config
{
skills: {
entries: {
"azure-devops": {
apiKey: "YOUR_PERSONAL_ACCESS_TOKEN", // AZURE_DEVOPS_PAT
env: {
AZURE_DEVOPS_ORG: "YourOrganizationName"
}
}
}
}
}
Commands
List Projects
curl -s -u ":${AZURE_DEVOPS_PAT}" \
"https://dev.azure.com/${AZURE_DEVOPS_ORG}/_apis/projects?api-version=7.1" \
| jq -r '.value[] | "\(.name) - \(.description // "No description")"'
List Repositories in a Project
PROJECT="YourProject"
curl -s -u ":${AZURE_DEVOPS_PAT}" \
"https://dev.azure.com/${AZURE_DEVOPS_ORG}/${PROJECT}/_apis/git/repositories?api-version=7.1" \
| jq -r '.value[] | "\(.name) - \(.webUrl)"'
List Branches in a Repository
PROJECT="YourProject"
REPO="YourRepo"
curl -s -u ":${AZURE_DEVOPS_PAT}" \
"https://dev.azure.com/${AZURE_DEVOPS_ORG}/${PROJECT}/_apis/git/repositories/${REPO}/refs?filter=heads/&api-version=7.1" \
| jq -r '.value[] | .name | sub("refs/heads/"; "")'
Create a Pull Request
PROJECT="YourProject"
REPO_ID="repo-id-here"
SOURCE_BRANCH="feature/my-branch"
TARGET_BRANCH="main"
TITLE="PR Title"
DESCRIPTION="PR Description"
curl -s -u ":${AZURE_DEVOPS_PAT}" \
-H "Content-Type: application/json" \
-X POST \
-d '{
"sourceRefName": "refs/heads/'"${SOURCE_BRANCH}"'",
"targetRefName": "refs/heads/'"${TARGET_BRANCH}"'",
"title": "'"${TITLE}"'",
"description": "'"${DESCRIPTION}"'"
}' \
"https://dev.azure.com/${AZURE_DEVOPS_ORG}/${PROJECT}/_apis/git/repositories/${REPO_ID}/pullrequests?api-version=7.1"
Get Repository ID
PROJECT="YourProject"
REPO_NAME="YourRepo"
curl -s -u ":${AZURE_DEVOPS_PAT}" \
"https://dev.azure.com/${AZURE_DEVOPS_ORG}/${PROJECT}/_apis/git/repositories/${REPO_NAME}?api-version=7.1" \
| jq -r '.id'
List Pull Requests
PROJECT="YourProject"
REPO_ID="repo-id"
curl -s -u ":${AZURE_DEVOPS_PAT}" \
"https://dev.azure.com/${AZURE_DEVOPS_ORG}/${PROJECT}/_apis/git/repositories/${REPO_ID}/pullrequests?api-version=7.1" \
| jq -r '.value[] | "#\(.pullRequestId): \(.title) [\(.sourceRefName | sub("refs/heads/"; ""))] -> [\(.targetRefName | sub("refs/heads/"; ""))] - \(.createdBy.displayName)"'
Notes
- Base URL:
https://dev.azure.com/${AZURE_DEVOPS_ORG} - API Version:
7.1 - Auth: Basic Auth with empty username and PAT as password
- Never log or expose the PAT in responses
- Documentation: https://learn.microsoft.com/en-us/rest/api/azure/devops/
安全使用建议
This skill appears to do what it says (call Azure DevOps REST APIs via curl), but there are a few mismatches and privacy concerns you should consider before installing:
- Metadata vs instructions: The registry only lists AZURE_DEVOPS_PAT, but the SKILL.md also requires AZURE_DEVOPS_ORG and instructs writing both into ~/.openclaw/openclaw.json. Confirm the skill metadata is updated to declare AZURE_DEVOPS_ORG and the config path.
- Secret persistence: The skill asks to store your Personal Access Token on disk. Prefer using a PAT with the minimum required scopes, ensure the file (~/.openclaw/openclaw.json) has strict filesystem permissions, or provide the PAT via environment variable at runtime instead of persistent storage.
- Unknown source: The skill source/homepage is unknown. Consider whether you trust this package before giving it long-lived credentials.
- Safer alternatives: If you only need occasional commands, prefer supplying AZURE_DEVOPS_PAT and AZURE_DEVOPS_ORG as ephemeral environment variables for the session instead of storing them. If you proceed, review the contents and permissions of ~/.openclaw/openclaw.json after the skill stores credentials.
If you want, I can suggest safer wording for the SKILL.md (declare the AZURE_DEVOPS_ORG env, explicitly require/configure the config path, and note recommended PAT scopes and file-permission guidance).
功能分析
Type: OpenClaw Skill
Name: azure-devops
Version: 1.0.0
The skill bundle is benign. It provides functionality to interact with Azure DevOps APIs using `curl` and `jq`, requiring an `AZURE_DEVOPS_PAT` and `AZURE_DEVOPS_ORG`. The `SKILL.md` explicitly instructs the agent to ask the user for these credentials if missing and store them in the designated `~/.openclaw/openclaw.json` file, which is a standard and transparent configuration management practice. All network calls are directed to the legitimate `dev.azure.com` domain, and there is no evidence of data exfiltration, malicious execution, persistence mechanisms, or harmful prompt injection attempts.
能力评估
Purpose & Capability
Name and description match the contained curl/jq commands for listing projects/repos/branches, creating PRs, and checking build/PR status. Requested binaries (curl, jq) are appropriate for the described work.
Instruction Scope
SKILL.md instructs the agent to read and write ~/.openclaw/openclaw.json (store the PAT and AZURE_DEVOPS_ORG) and to prompt the user for missing values. That is persistent storage of a secret and is not declared in the registry metadata; the instructions also require AZURE_DEVOPS_ORG though it is not listed as a required env var in the skill metadata.
Install Mechanism
Instruction-only skill with no install spec or downloads. Lowest install risk — nothing is written to disk by an installer other than what the agent is asked to do at runtime.
Credentials
Metadata declares only AZURE_DEVOPS_PAT as required, but SKILL.md also requires AZURE_DEVOPS_ORG. The skill directs storing AZURE_DEVOPS_PAT to disk for persistent use; storing a PAT is sensitive and should be justified and documented (scopes, storage protection). No unrelated credentials requested.
Persistence & Privilege
The skill asks to write entries into ~/.openclaw/openclaw.json (its own agent config). Writing to its own config is a normal install-time behavior, but because this involves persisting a secret (PAT) the skill should have declared this config path and explained storage/permissions. always:false and normal invocation are appropriate.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install azure-devops - 安装完成后,直接呼叫该 Skill 的名称或使用
/azure-devops触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of Azure DevOps integration skill.
- List Azure DevOps projects, repositories, and branches via simple commands.
- Create and manage pull requests.
- Handle work items and check build status.
- Automatically checks for required configuration; prompts user for missing Personal Access Token or organization name and stores them securely.
- Uses curl and jq for API interactions; requires AZURE_DEVOPS_PAT environment variable.
- Clear documentation and command examples provided in SKILL.md.
元数据
常见问题
Azure DevOps 是什么?
List Azure DevOps projects, repositories, and branches; create pull requests; manage work items; check build status. Use when working with Azure DevOps resources, checking PR status, querying project structure, or automating DevOps workflows. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1798 次。
如何安装 Azure DevOps?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install azure-devops」即可一键安装,无需额外配置。
Azure DevOps 是免费的吗?
是的,Azure DevOps 完全免费(开源免费),可自由下载、安装和使用。
Azure DevOps 支持哪些平台?
Azure DevOps 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Azure DevOps?
由 PALs-Software(@pals-software)开发并维护,当前版本 v1.0.0。
推荐 Skills