← 返回 Skills 市场
nimit2801

DevRev

作者 Nimit Savant · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
578
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install devrev
功能描述
Interact with DevRev to create/update issues and tickets, and search/query works and parts. Use when asked to create a DevRev issue or ticket, update an exis...
使用说明 (SKILL.md)

DevRev Skill

Interact with DevRev via its REST API to manage issues, tickets, and parts.

Setup

Requires a DevRev PAT token. Read from env var DEVREV_TOKEN or ask the user to provide it.

export DEVREV_TOKEN=\x3Cyour-pat-token>

Base URL: https://api.devrev.ai Auth header: Authorization: \x3Ctoken> (no "Bearer" prefix needed)

Common Operations

List Works (issues + tickets)

curl -s "https://api.devrev.ai/works.list" \
  -H "Authorization: $DEVREV_TOKEN" | python3 -m json.tool

Filter by type:

# Only issues
curl -s "https://api.devrev.ai/works.list?type[]=issue" \
  -H "Authorization: $DEVREV_TOKEN"

# Only tickets  
curl -s "https://api.devrev.ai/works.list?type[]=ticket" \
  -H "Authorization: $DEVREV_TOKEN"

Get a Specific Work Item

# Get by DON ID
curl -s -X POST "https://api.devrev.ai/works.get" \
  -H "Authorization: $DEVREV_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"id": "don:core:dvrv-us-1:devo/XXXX:issue/72"}'

Create an Issue

curl -s -X POST "https://api.devrev.ai/works.create" \
  -H "Authorization: $DEVREV_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "type": "issue",
    "title": "Issue title",
    "body": "Description here",
    "applies_to_part": "don:core:...:product/X",
    "owned_by": ["don:identity:...:devu/1"]
  }'

Create a Ticket

curl -s -X POST "https://api.devrev.ai/works.create" \
  -H "Authorization: $DEVREV_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "type": "ticket",
    "title": "Ticket title",
    "body": "Description here",
    "applies_to_part": "don:core:...:product/X",
    "severity": "medium"
  }'

Severity options: blocker, high, medium, low

Update a Work Item

curl -s -X POST "https://api.devrev.ai/works.update" \
  -H "Authorization: $DEVREV_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "id": "don:core:...:issue/72",
    "title": "Updated title",
    "body": "Updated description"
  }'

Search Works

curl -s -X POST "https://api.devrev.ai/works.list" \
  -H "Authorization: $DEVREV_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "type": ["issue"],
    "stage": {"name": ["triage", "in_development"]}
  }'

List Parts (products, features, enhancements)

curl -s "https://api.devrev.ai/parts.list" \
  -H "Authorization: $DEVREV_TOKEN"

Key Data Structures

See references/api.md for full field details and DON ID format.

Tips

  • DON IDs are the full don:core:... identifiers used for all references
  • display_id (e.g. ISS-72, TKT-29) is human-readable but use the DON ID for API calls
  • To get parts (products) for creating works, call parts.list first
  • Priority for issues: p0 (critical) → p1p2p3
  • Stage names for issues: triage, in_development, completed
  • Stage names for tickets: queued, work_in_progress, resolved
安全使用建议
This skill appears to be a straightforward DevRev API helper, but there are two things to check before installing: (1) the SKILL.md requires a DEVREV_TOKEN PAT but the registry metadata lists no required credential — verify whether the platform will prompt securely for the token or whether you must paste it into the agent manually; (2) the skill's source/homepage are unknown, so prefer obtaining an official skill from a trusted publisher. If you proceed, use a DevRev PAT with the minimal scopes needed, store it in a secure secret store (avoid pasting into chat), rotate/revoke tokens if needed, and consider testing with a low-privilege or test org account first. If the registry metadata can be corrected (adding DEVREV_TOKEN as required) and the author/source is verifiable, the risk is much lower.
功能分析
Type: OpenClaw Skill Name: devrev Version: 1.0.0 The skill bundle is benign. It provides instructions and examples for interacting with the legitimate DevRev API using `curl` commands. It correctly retrieves the `DEVREV_TOKEN` from an environment variable for authentication and directs all network traffic to `https://api.devrev.ai`. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation. All actions are clearly aligned with the stated purpose of managing DevRev issues and tickets.
能力评估
Purpose & Capability
The SKILL.md clearly implements a DevRev REST API client (works.list, works.create, works.update, parts.list, etc.), which matches the skill's name and description. However, the registry metadata lists no required environment variables or primary credential while the SKILL.md explicitly requires a DEVREV_TOKEN PAT. That metadata omission is an inconsistency (could be a packaging error) and may prevent the platform from prompting for the token correctly.
Instruction Scope
Runtime instructions are limited to calling https://api.devrev.ai endpoints with curl and using the DEVREV_TOKEN for Authorization; they do not instruct reading arbitrary files, scanning the host, or sending data to other endpoints. The instructions stay within the expected DevRev integration scope.
Install Mechanism
This is an instruction-only skill with no install spec and no code files to be written or executed on disk, which minimizes install-time risk.
Credentials
The SKILL.md requires a DevRev PAT (DEVREV_TOKEN), which is proportionate for the described API operations. The problem is that the skill's declared registry requirements list no environment variables or primary credential — a discrepancy that could lead to the token being requested ad-hoc or mishandled. Confirming least-privilege scopes for the PAT is recommended.
Persistence & Privilege
The skill does not request always:true and is user-invocable, with autonomous invocation allowed (the platform default). There is no evidence the skill modifies other skills or system settings. Note: because the source is unknown, autonomous invocation combined with missing metadata increases risk modestly, but not enough to mark this malicious.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install devrev
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /devrev 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release: create/update issues & tickets, search works and parts
元数据
Slug devrev
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

DevRev 是什么?

Interact with DevRev to create/update issues and tickets, and search/query works and parts. Use when asked to create a DevRev issue or ticket, update an exis... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 578 次。

如何安装 DevRev?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install devrev」即可一键安装,无需额外配置。

DevRev 是免费的吗?

是的,DevRev 完全免费(开源免费),可自由下载、安装和使用。

DevRev 支持哪些平台?

DevRev 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 DevRev?

由 Nimit Savant(@nimit2801)开发并维护,当前版本 v1.0.0。

💬 留言讨论