← 返回 Skills 市场
ariktulcha

DevOps Bridge

作者 Arik Tulchinsky · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
840
总下载
0
收藏
7
当前安装
1
版本数
在 OpenClaw 中安装
/install devops-bridge
功能描述
Unified developer operations bridge connecting GitHub, CI/CD (GitHub Actions), Slack, Discord, and issue trackers (Linear, Jira, GitHub Issues) into cross-to...
使用说明 (SKILL.md)

DevOps Bridge

The missing link between your dev tools. This skill connects GitHub, CI/CD, Slack/Discord, and issue trackers into workflows that actually make sense — so you stop context-switching between 6 browser tabs.

Why This Exists

Developers already use separate skills for GitHub, Slack, etc. But nobody has built the bridge: when CI fails, automatically link it to the PR, notify the right Slack channel, and update the ticket. This skill is that bridge.

Core Capabilities

1. Smart Notifications

Transform noisy GitHub events into actionable, context-rich messages. Instead of "Build failed", deliver:

🔴 CI Failed — PR #142 "Add OAuth flow" by @alice
  └─ Test: auth.test.ts:47 — Expected 200, got 401
  └─ Last passing commit: abc1234 (2 hours ago)  
  └─ Linked issue: LINEAR-389 "Implement SSO"
  └─ Action: Reply "fix" to see the failing test, "logs" for full output

When sending notifications, always:

  • Include the PR title and author, not just the number
  • Link to the specific failing test or check, not just "CI failed"
  • Mention the last known good commit for quick bisect context
  • Cross-reference related issues/tickets if they exist
  • Suggest a concrete next action

2. PR Review Management

Track pull request lifecycle across tools:

Review reminders:

  • Scan open PRs daily and flag those waiting for review
  • Escalate based on age: gentle reminder at 24h, stronger at 48h, urgent at 72h+
  • Send reminders to the assigned reviewer via Slack/Discord DM or channel
  • Format:
    👀 Review needed:
    • PR #142 "Add OAuth flow" — waiting 3 days (assigned: @bob)
    • PR #156 "Fix pagination" — waiting 1 day (assigned: @carol)
    

Review status sync:

  • When a PR gets approved on GitHub, post to the team channel
  • When changes are requested, notify the author directly
  • When all checks pass + approved, prompt: "Ready to merge — want me to merge it?"

3. CI/CD Intelligence

Go beyond "pass/fail" with intelligent CI analysis:

  • Failure grouping: if multiple PRs fail on the same test, flag it as a systemic issue rather than spamming individual notifications
  • Flaky test detection: if a test fails intermittently across PRs, note it: "This test has failed 3 times this week across different PRs — likely flaky"
  • Duration tracking: "This build took 45 min, up from the usual 20 min — something may be wrong"
  • Auto-retry suggestion: for known flaky failures, suggest or trigger a re-run

4. Issue Tracker Sync

Keep issue trackers (Linear, Jira, GitHub Issues) in sync with actual development activity:

  • When a PR references an issue (e.g., "Fixes #123"), update the issue status automatically
  • When a PR is merged, move the linked issue to "Done" or "In Review"
  • When CI fails on a PR linked to an issue, add a comment to the issue noting the blocker
  • Surface orphaned PRs: "PR #167 doesn't reference any issue — should it?"

5. Daily Dev Standup

Generate a team-level development summary on demand or via cron:

🧑‍💻 Dev Standup — [Date]

Merged yesterday:
  • PR #140 "Refactor auth module" by @alice → LINEAR-385 closed
  • PR #143 "Update deps" by @bob

In review:
  • PR #142 "Add OAuth flow" by @alice — 2 approvals, CI passing ✅
  • PR #156 "Fix pagination" by @carol — changes requested by @bob

Blocked:
  • PR #158 "Migrate DB" by @dave — CI failing (migration timeout)
  • Issue LINEAR-402 — no assignee, due tomorrow

CI Health: 87% pass rate (down from 94% last week)
  └─ Flaky: auth.test.ts (failed 4/10 runs)

Configuration

Required Tools

  • gh CLI (GitHub) — for repo activity, PRs, issues, CI status
  • At least one messaging channel configured (Slack, Discord, Telegram)

Optional Tools

  • Linear CLI or API — for Linear issue tracking
  • Jira API — for Jira integration
  • GitHub Issues — works out of the box with gh

Setup Flow

On first use, gather configuration interactively:

  1. Which repos to monitor? Ask for a list or use "all repos I have push access to"
  2. Where to send notifications? Slack channel, Discord channel, Telegram, or all
  3. How aggressive should reminders be? Options: gentle (72h), moderate (48h), aggressive (24h)
  4. Include CI details? Some users want full logs, others just pass/fail
  5. Who's on the team? Map GitHub usernames to Slack/Discord handles for @mentions

Store configuration in workspace memory for persistence.

Cron Setup

Suggest these default schedules (user can customize):

[
  {
    "name": "Morning dev digest",
    "schedule": "0 9 * * 1-5",
    "prompt": "Generate dev standup summary for my repos"
  },
  {
    "name": "PR review reminder",  
    "schedule": "0 14 * * 1-5",
    "prompt": "Check for PRs waiting for review and send reminders"
  },
  {
    "name": "End of day CI report",
    "schedule": "0 17 * * 1-5",
    "prompt": "Summarize today's CI/CD activity and flag any issues"
  }
]

Command Reference

Users can trigger specific actions with natural language:

User says Action
"What's happening in my repos?" Full activity summary across all monitored repos
"Any failing builds?" CI status check with details on failures
"Who needs a review?" List PRs awaiting review with age and assignee
"Standup" Generate daily dev standup summary
"Notify #dev-team about PR 142" Send a formatted notification about a specific PR
"Link PR 142 to LINEAR-389" Create cross-reference between PR and issue
"Set up CI alerts for repo X" Configure monitoring for a specific repository
"Merge PR 142" Merge if all checks pass and approved; warn if not

Edge Cases

  • Monorepo: if monitoring a monorepo, group notifications by directory/team, not just by PR
  • Forks: when PRs come from forks, note this clearly (different trust level)
  • Draft PRs: don't send review reminders for draft PRs unless user asks
  • Stale PRs: if a PR has been open >7 days with no activity, suggest closing or rebasing
  • Rate limits: GitHub API has rate limits. Batch requests and cache results within a session
  • No messaging configured: if no Slack/Discord/Telegram, output to the current conversation instead
  • Multiple orgs: if user has repos across multiple GitHub orgs, handle them all but label clearly

Integration Pattern

This skill works best with other installed skills. When detected:

  • github skill: defer raw GitHub operations to it, use devops-bridge for cross-tool logic
  • slack skill: use it for message delivery, devops-bridge composes the messages
  • daily-briefing-hub: feed dev activity data into the morning briefing's "Dev Activity" section
安全使用建议
This skill's described functionality legitimately needs GitHub, messaging, and issue-tracker credentials and CLIs, but the registry entry declares none — that's the main red flag. Before installing or using it, ask the publisher for: (1) an explicit list of required credentials and the expected auth flows (prefer OAuth or temporary tokens, not pasting secrets into chat); (2) where configuration and any tokens will be stored, how long they persist, and whether they're encrypted; (3) evidence of the skill's source code or a homepage (there is none listed); and (4) clarification about the unicode-control characters found in SKILL.md. If the skill asks you to paste long-lived tokens into the chat or to grant broad repo access without a clear OAuth flow and a trustworthy source, do not proceed. If you still want to test it, do so with a throwaway account or a small test repo and limited-scope tokens (least privilege) and review all messages the skill posts before granting it wider access.
功能分析
Type: OpenClaw Skill Name: devops-bridge Version: 1.0.0 The `SKILL.md` describes a 'devops-bridge' that integrates various development tools. It explicitly mentions using the `gh` CLI and other CLIs (Linear, Jira APIs), implying the agent will execute shell commands. This capability, combined with powerful actions like 'trigger a re-run' for CI/CD and 'Merge PR 142', introduces a significant vulnerability risk for shell injection (RCE) if user-provided input is not rigorously sanitized before being used in command construction. While these actions are aligned with the skill's stated purpose, the inherent risk of shell execution makes it suspicious due to potential for exploitation, even without clear evidence of intentional malice.
能力评估
Purpose & Capability
The skill claims to connect GitHub, CI, Slack/Discord, Linear, Jira, etc., which legitimately requires network access and service credentials. However, the registry metadata declares no required environment variables, no primary credential, and no required binaries, while SKILL.md explicitly lists 'gh' CLI and messaging/issue-tracker credentials as required. This mismatch is disproportionate and incoherent: a bridge like this should declare the specific credentials and tools it needs.
Instruction Scope
SKILL.md instructs the agent to scan repos (including 'all repos I have push access to'), fetch CI logs, link PRs to issues, post messages to Slack/Discord, and interactively gather configuration. Those actions require access to account-level data and service tokens. The instructions also say to store configuration in workspace memory and propose cron jobs. The runtime instructions therefore go beyond a simple read-only helper and could access or persist sensitive tokens or repo data — but the skill does not declare or constrain that access. A unicode-control-chars prompt-injection pattern was also detected inside SKILL.md, which suggests the file attempted to embed tricky characters; that is suspicious in an instructions-only document.
Install Mechanism
There is no install spec and no code files (instruction-only), which reduces file-execution risk. However, SKILL.md depends on external CLIs (gh, optional Linear CLI) and APIs; the skill does not provide an installer or declare these binaries in registry metadata. The lack of an install step is low-risk by itself but the mismatch between declared requirements and the documented 'Required Tools' is a coherence issue.
Credentials
The skill will need multiple service credentials (GitHub token, Slack/Discord bot token or webhook, Linear/Jira API tokens) to implement its features, but requires.env is empty and no primary credential is declared. That absence is disproportionate and makes it unclear how credentials will be supplied or stored. The instructions' expectation that the agent can access 'all repos I have push access to' implies broad GitHub permissions; the user should not paste or expose long-lived tokens into chat unless they understand where and how they are stored.
Persistence & Privilege
always:false (normal). SKILL.md instructs storing configuration in workspace memory and scheduling cron prompts; persisting mappings (e.g., GitHub→Slack handles), schedules, and possibly tokens is expected for functionality. The document does not specify retention, encryption, or scope of persisted data — the user should confirm where workspace memory is stored and whether tokens/configuration persist after uninstalling. Autonomous invocation is allowed by default; this increases blast radius only if credentials are provided.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install devops-bridge
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /devops-bridge 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
🚀 Initial release v1.0.0 Cross-tool developer operations bridge connecting: - GitHub PRs, issues, and repository activity - CI/CD pipelines (GitHub Actions) with failure analysis - Slack/Discord notifications with full context - Linear, Jira, and GitHub Issues sync Features: - Smart CI failure notifications — shows failing test, last passing commit, and linked issue - PR review lifecycle tracking with escalating reminders (24h, 48h, 72h) - Flaky test detection across PRs - Auto-sync issue status when PRs merge - Daily dev standup summary generation - Team username mapping (GitHub → Slack/Discord @mentions) - Cron support for morning digest, afternoon review reminders, EOD CI report - Monorepo aware — groups notifications by directory/team The missing link between your dev tools. One skill replaces tab-switching between GitHub, Slack, and your issue tracker.
元数据
Slug devops-bridge
版本 1.0.0
许可证
累计安装 7
当前安装数 7
历史版本数 1
常见问题

DevOps Bridge 是什么?

Unified developer operations bridge connecting GitHub, CI/CD (GitHub Actions), Slack, Discord, and issue trackers (Linear, Jira, GitHub Issues) into cross-to... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 840 次。

如何安装 DevOps Bridge?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install devops-bridge」即可一键安装,无需额外配置。

DevOps Bridge 是免费的吗?

是的,DevOps Bridge 完全免费(开源免费),可自由下载、安装和使用。

DevOps Bridge 支持哪些平台?

DevOps Bridge 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 DevOps Bridge?

由 Arik Tulchinsky(@ariktulcha)开发并维护,当前版本 v1.0.0。

💬 留言讨论