← 返回 Skills 市场
dandandujie

github-helper

作者 dandandujie · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
530
总下载
0
收藏
5
当前安装
1
版本数
在 OpenClaw 中安装
/install github-helper
功能描述
Local GitHub repository helper for search, clone, sync, and issue/PR inspection workflows. Use when users mention github/repo/repository, ask to download or...
使用说明 (SKILL.md)

GitHub Helper

Overview

管理本地 GitHub 仓库目录，维护可检索知识库，并为仓库检索、克隆、Issue/PR 跟踪提供统一流程。

Local Repository Directory

Default path: /Users/liuchen/Documents/github

This path is referenced in the knowledge base file: @/Users/liuchen/Documents/github/CLAUDE.md

Core Workflows

1. Initialize or Update Knowledge Base

When first using this skill or when user requests an update:

  1. Check if the github directory exists.
  2. If not found, ask user for the correct path.
  3. Scan the directory using scripts/scan_repos.py.
  4. Update CLAUDE.md using scripts/update_kb.py.

Example:

# Scan repositories
python3 scripts/scan_repos.py /Users/liuchen/Documents/github

# Update knowledge base (pass repos as JSON)
python3 scripts/update_kb.py /Users/liuchen/Documents/github '[{"name":"repo1","path":"/path","summary":"desc"}]'

2. Search for Repository

When user mentions a repository name:

  1. Check local first: Read @/Users/liuchen/Documents/github/CLAUDE.md.
  2. If found locally: Use local path to analyze and answer.
  3. If not found: Search GitHub using gh or GitHub MCP tools.
  4. Offer to download: Ask user whether to clone.

3. Download Repository

When user requests to download/clone:

  1. Clone to the github directory: 
    cd /Users/liuchen/Documents/github
git clone \x3Crepo-url>
  2. After successful clone, update knowledge base:
    • Run scripts/scan_repos.py to get repo info.
    • Run scripts/update_kb.py to update CLAUDE.md.

4. GitHub Search Integration

Use gh CLI first, then fall back to GitHub MCP:

Search repositories

gh search repos \x3Cquery> --limit 10

Search issues

gh issue list --repo \x3Cowner/repo> --state all --limit 20

Search PRs

gh pr list --repo \x3Cowner/repo> --state all --limit 20

Answering Repository Questions

  1. Check whether repository exists in local knowledge base.
  2. If local, prioritize local code inspection.
  3. If information is insufficient, query GitHub issues/PRs/releases.

Directory Validation

If /Users/liuchen/Documents/github does not exist:

  1. Ask user for the correct repository root path.
  2. Update this SKILL.md path if needed.
  3. Initialize knowledge base at the new location.

Scripts

  • scan_repos.py: Scan local repositories and extract summaries.
  • update_kb.py: Update CLAUDE.md with repository metadata.
安全使用建议
This skill appears to do what it says: scan a local GitHub folder, optionally call gh/git, clone repos into a local directory and maintain a CLAUDE.md summary file. Before installing or invoking it: (1) confirm or change the default path (/Users/liuchen/Documents/github) so it doesn't access an unexpected directory; (2) ensure git and the gh CLI are installed and that you are comfortable the skill can run clone operations (which write to disk and perform network calls); (3) inspect and run the included scripts manually if you want to verify behavior — they only read README files and write CLAUDE.md, but cloning will bring remote repo contents onto your machine; (4) be cautious if you have sensitive/private repos in the target directory or limited disk/quota; and (5) ask the skill author to clarify the ambiguous instruction about updating SKILL.md (is the agent expected to edit installed skill files?).
功能分析
Type: OpenClaw Skill Name: github-helper Version: 1.0.0 The skill is classified as suspicious due to multiple potential shell injection vulnerabilities outlined in `SKILL.md`. The instructions explicitly show direct execution of `git clone <repo-url>` and `gh` CLI commands (e.g., `gh search repos <query>`, `gh issue list --repo <owner/repo>`). If the `<repo-url>`, `<query>`, or `<owner/repo>` arguments are derived from untrusted user input without proper sanitization by the agent, this could lead to arbitrary command execution (RCE). While the Python scripts themselves are benign, the way they are instructed to be called, and especially the `git` and `gh` commands, present a significant security risk.
能力评估
ℹ Purpose & Capability
The name, description, SKILL.md and included scripts are coherent: they scan a local GitHub directory and update a CLAUDE.md knowledge file and use git/gh for remote queries. However, SKILL.md explicitly references gh and git and a specific default path (/Users/liuchen/Documents/github) while the skill's metadata declares no required binaries or environment variables — the missing declaration of required CLI tools and the hardcoded user path are minor mismatches that should be clarified.
ℹ Instruction Scope
Instructions stay within the stated purpose (scan local repos, optionally call gh/remote search, clone into the local dir, update CLAUDE.md). Two items to note: (1) SKILL.md uses a hardcoded absolute path tied to a particular user account and will read/write files there; (2) the doc says 'Update this SKILL.md path if needed,' which implies editing the skill's documentation/config but no script in the package performs that — this is ambiguous and could grant the agent discretionary modification of skill files if implemented elsewhere.
✓ Install Mechanism
This is instruction-only with small helper scripts included; there is no download/install step, no external archive URLs, and nothing will be written to disk by an installer. The scripts themselves are simple and local.
✓ Credentials
The skill does not request environment variables or credentials. The workflows mention gh (GitHub CLI) and git usage, which are reasonable for a GitHub helper; no unexplained secret access is requested.
ℹ Persistence & Privilege
always:false and normal autonomous invocation are set (expected). The skill will read and write files inside the configured repo directory (cloning repos and writing CLAUDE.md). The SKILL.md text suggests updating its own path entry, which would amount to modifying the skill docs/config if acted on — that behavior is not implemented in the provided scripts but should be treated as a potential source of unexpected file edits if the agent is given permission.
如何使用
  1. 确保已安装 OpenClaw（本地或 Docker 部署）
  2. 在对话框中输入安装命令：/install github-helper
  3. 安装完成后，直接呼叫该 Skill 的名称或使用 /github-helper 触发
  4. 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of github-helper for local GitHub repository management. - Provides workflows to search, clone, sync, and inspect issues/PRs for repositories at `/Users/liuchen/Documents/github` - Integrates local knowledge base using CLAUDE.md, updated via helper scripts (`scan_repos.py`, `update_kb.py`) - Uses GitHub CLI (`gh`) for searching repositories, issues, and PRs; falls back to MCP tools if needed - Supports user prompts for directory validation and repository downloads/cloning - Prioritizes local inspection for repository questions, with fallback to GitHub queries when needed
元数据
Slug github-helper
版本 1.0.0
许可证 —
累计安装 6
当前安装数 5
历史版本数 1
常见问题

github-helper 是什么？

Local GitHub repository helper for search, clone, sync, and issue/PR inspection workflows. Use when users mention github/repo/repository, ask to download or... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 530 次。

如何安装 github-helper？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install github-helper」即可一键安装，无需额外配置。

github-helper 是免费的吗？

是的，github-helper 完全免费（开源免费），可自由下载、安装和使用。

github-helper 支持哪些平台？

github-helper 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 github-helper？

由 dandandujie（@dandandujie）开发并维护，当前版本 v1.0.0。

推荐 Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191113 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 留言讨论