← 返回 Skills 市场
3287
总下载
5
收藏
12
当前安装
1
版本数
在 OpenClaw 中安装
/install gitlab-manager
功能描述
Manage GitLab repositories, merge requests, and issues via API. Use for tasks like creating repos, reviewing code in MRs, or tracking issues.
使用说明 (SKILL.md)
GitLab Manager
This skill allows interaction with GitLab.com via the API.
Prerequisites
- GITLAB_TOKEN: A Personal Access Token with
apiscope must be set in the environment.
Usage
Use the provided Node.js script to interact with GitLab.
Script Location
scripts/gitlab_api.js
Commands
1. Create Repository
Create a new project in GitLab.
./scripts/gitlab_api.js create_repo "\x3Cname>" "\x3Cdescription>" "\x3Cvisibility>"
# Visibility: private (default), public, internal
2. List Merge Requests
List MRs for a specific project.
./scripts/gitlab_api.js list_mrs "\x3Cproject_path>" "[state]"
# Project path: e.g., "jorgermp/my-repo" (will be URL encoded automatically)
# State: opened (default), closed, merged, all
3. Comment on Merge Request
Add a comment (note) to a specific MR. Useful for code review.
./scripts/gitlab_api.js comment_mr "\x3Cproject_path>" \x3Cmr_iid> "\x3Ccomment_body>"
4. Create Issue
Open a new issue.
./scripts/gitlab_api.js create_issue "\x3Cproject_path>" "\x3Ctitle>" "\x3Cdescription>"
Examples
Create a private repo:
GITLAB_TOKEN=... ./scripts/gitlab_api.js create_repo "new-tool" "A cool new tool" "private"
Review an MR:
# First list to find ID
GITLAB_TOKEN=... ./scripts/gitlab_api.js list_mrs "jorgermp/my-tool" "opened"
# Then comment
GITLAB_TOKEN=... ./scripts/gitlab_api.js comment_mr "jorgermp/my-tool" 1 "Great work, but check indentation."
安全使用建议
Before installing: (1) Ask the publisher/registry to update the metadata to declare GITLAB_TOKEN as a required credential so the platform can treat it as a secret. (2) Inspect the included script (it's short) and confirm it only talks to https://gitlab.com/api/v4 (no hidden endpoints). (3) If you proceed, create a dedicated GitLab Personal Access Token with the minimum scopes and expiration needed (avoid broad scopes), and store it in the platform's secret store rather than passing it on the command line. (4) Consider running the script locally or in an isolated environment first. (5) If you cannot verify the origin/trustworthiness of the skill (source is unknown), prefer not to grant a PAT to it.
功能分析
Type: OpenClaw Skill
Name: gitlab-manager
Version: 1.0.0
The OpenClaw skill bundle provides a Node.js script to manage GitLab resources (repositories, merge requests, issues) via its API. The `SKILL.md` clearly outlines the purpose and usage, requiring a `GITLAB_TOKEN` for authentication. The `scripts/gitlab_api.js` script correctly implements these functionalities, making API calls exclusively to `https://gitlab.com/api/v4` using the provided token. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation. The `fs` module is imported but not used, which is not a security concern.
能力评估
Purpose & Capability
The name/description, SKILL.md, and the included script consistently implement GitLab API operations (create repo, list/comment MRs, create issues) calling https://gitlab.com/api/v4. However the registry metadata claims no required environment variables or primary credential while both SKILL.md and the script require GITLAB_TOKEN. That metadata omission is disproportionate and reduces transparency about needed credentials.
Instruction Scope
SKILL.md limits runtime actions to running the provided Node script to talk to the GitLab API. The instructions do not ask the agent to read unrelated files or send data to endpoints other than GitLab. The runtime behavior is scoped to repository/MR/issue operations.
Install Mechanism
There is no install spec (instruction-only) and the package only includes a short Node script. Nothing is downloaded or extracted from external/untrusted URLs.
Credentials
Requiring a GITLAB_TOKEN (PAT with 'api' scope) is appropriate for the declared functionality, but the registry metadata does not list this required env var or a primary credential. That mismatch is problematic because the platform may not prompt you to provide a token or treat it as a secret. Also, giving a PAT to an installed skill grants it direct API access to your projects — you should ensure the token is least-privilege, short-lived, and issued only if you trust the skill.
Persistence & Privilege
always is false and there are no config paths or system-wide changes requested. The skill can be invoked autonomously (platform default) — normal for skills, but note that autonomous invocation plus a supplied PAT allows the skill to act on your GitLab resources without further prompts.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install gitlab-manager - 安装完成后,直接呼叫该 Skill 的名称或使用
/gitlab-manager触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of gitlab-manager.
- Manage GitLab repositories, merge requests, and issues via the API.
- Supports creating repositories, listing and commenting on merge requests, and creating issues using a Node.js script.
- Requires GITLAB_TOKEN with appropriate API permissions.
- Designed for simple command-line integration and automation of common GitLab tasks.
元数据
常见问题
Gitlab Manager 是什么?
Manage GitLab repositories, merge requests, and issues via API. Use for tasks like creating repos, reviewing code in MRs, or tracking issues. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 3287 次。
如何安装 Gitlab Manager?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install gitlab-manager」即可一键安装,无需额外配置。
Gitlab Manager 是免费的吗?
是的,Gitlab Manager 完全免费(开源免费),可自由下载、安装和使用。
Gitlab Manager 支持哪些平台?
Gitlab Manager 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Gitlab Manager?
由 jorgermp(@jorgermp)开发并维护,当前版本 v1.0.0。
推荐 Skills