← 返回 Skills 市场
mrzhangkris

Github

作者 mrzhangkris · GitHub ↗ · v2.0.0 · MIT-0
cross-platform ⚠ suspicious
295
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install laomo-github
功能描述
老默 GitHub 助手 - 多账户管理、PR 一键推送/清理、代码审查、通知推送。v2.0 完整功能。
使用说明 (SKILL.md)

laomo-github - 老默 GitHub 助手 v2.0

📖 概述

GitHub 技能是一套完整的 GitHub 自动化工具集，支持多账户管理、PR 操作、代码审查、通知推送等功能。

🔧 安装

GitHub 技能已包含 OpenClaw 核心技能。如果需要更新：

clawhub skill update github

📂 结构

skills/github/
├── github-accounts.sh    # 多账户管理
├── github-pr-push.sh     # PR 推送工具
├── github-pr-cleanup.sh  # PR 清理工具
├── github-review.sh      # 代码审查工具
├── github-notify.sh      # 通知推送工具
├── SKILL.md             # 技能文档
└── _meta.json           # 元数据

🔍 功能

1️⃣ 多账户管理 (github-accounts.sh)

管理多个 GitHub 账户，支持切换、验证和配置。

命令:

  • list - 列出所有账户
  • add - 添加新账户
  • switch - 切换账户
  • remove - 删除账户
  • validate - 验证账户状态
  • current - 显示当前账户

用法:

# 添加新账户
github-accounts.sh add personal

# 切换账户
github-accounts.sh switch work

# 验证所有账户
github-accounts.sh validate

# 显示当前账户
github-accounts.sh current

2️⃣ PR 推送工具 (github-pr-push.sh)

创建、推送和管理 Pull Requests。

命令:

  • create - 创建新的 PR
  • push - 推送分支到远程
  • update - 更新现有 PR
  • merge - 合并 PR

选项:

  • -m, --message - 自定义 PR 描述
  • -i, --issue - 关联的 Issue 编号
  • -t, --title - 自定义 PR 标题
  • -l, --labels - 添加标签
  • -r, --reviewers - 添加审查人
  • -d, --draft - 创建草稿 PR
  • -f, --force - 强制推送

用法:

# 创建新的 PR
github-pr-push.sh create feature/new-feature

# 创建并关联 Issue
github-pr-push.sh create -m "描述内容" -i 123,456

# 推送分支
github-pr-push.sh push main

# 合并 PR
github-pr-push.sh merge 123

3️⃣ PR 清理工具 (github-pr-cleanup.sh)

清理已合并的 PR、删除陈旧分支、处理冲突。

命令:

  • merged - 清理已合并的 PR 分支
  • old - 删除过期的临时分支
  • conflicts - 处理冲突的 PR
  • stale - 标记陈旧 PR

选项:

  • -r, --repo - GitHub 仓库 (owner/repo)
  • -d, --days - 过期天数（默认：30）
  • -l, --limit - 获取 PR 数量限制
  • -y, --yes - 自动确认所有操作
  • -n, --dry-run - 仅显示将要执行的操作

用法:

# 清理已合并的 PR
github-pr-cleanup.sh merged

# 删除过期的分支
github-pr-cleanup.sh old --days 14

# 处理冲突的 PR
github-pr-cleanup.sh conflicts

# 标记陈旧 PR
github-pr-cleanup.sh stale

4️⃣ 代码审查工具 (github-review.sh)

下载 PR 代码、进行本地审查、添加评论。

命令:

  • download - 下载 PR 代码
  • review - 审查 PR
  • comment - 添加审查评论
  • approve - 批准 PR
  • decline - 驳回 PR

选项:

  • -r, --repo - GitHub 仓库
  • -o, --output - 下载目录
  • -l, --lines - 审查行数限制
  • -f, --file - 审查特定文件
  • -v, --verbose - 显示详细信息

审查类型:

  • -s, --style - 代码风格审查
  • -b, --bug - Bug 修复审查
  • -p, --performance - 性能审查
  • -a, --security - 安全审查
  • -c, --complexity - 复杂度审查

用法:

# 下载 PR 代码
github-review.sh download 123

# 审查 PR
github-review.sh review 123 --style --bug

# 添加评论
github-review.sh comment 123 -m "LGTM!"

# 批准 PR
github-review.sh approve 123

# 驳回 PR
github-review.sh decline 123 -m "需要修改"

5️⃣ 通知推送工具 (github-notify.sh)

推送 GitHub 事件到各种平台。

目标平台:

  • discord - 推送到 Discord
  • dingtalk - 推送到钉钉
  • telegram - 推送到 Telegram
  • slack - 推送到 Slack
  • all - 推送到所有平台

选项:

  • -t, --type - 事件类型 (issue, pr, release, commit, workflow)
  • -m, --message - 自定义消息内容
  • -s, --status - 事件状态
  • -u, --url - 相关 URL
  • -a, --author - 作者
  • -l, --label - 标签
  • -r, --repo - GitHub 仓库
  • -n, --number - 问题/PR 编号
  • -T, --title - 标题
  • -d, --desc - 描述
  • --dry-run - 仅显示消息内容

用法:

# 推送到 Discord
github-notify.sh discord --type pr --status open

# 推送到钉钉
github-notify.sh dingtalk --type issue --number 123

# 推送到所有平台
github-notify.sh all --type commit --title "New release"

# 预览消息
github-notify.sh telegram --message "测试消息" --dry-run

⚙️ 配置

GitHub CLI

确保已安装并配置 gh：

# 安装 gh CLI
brew install gh

# 认证
gh auth login

Webhook URL (可选)

如需使用通知推送功能，配置 Webhook URL：

# Discord
export DISCORD_WEBHOOK_URL="https://discord.com/api/webhooks/..."

# 钉钉
export DINGTALK_WEBHOOK_URL="https://oapi.dingtalk.com/robot/send?access_token=..."

# Telegram
export TELEGRAM_BOT_TOKEN="..."
export TELEGRAM_CHAT_ID="..."

# Slack
export SLACK_WEBHOOK_URL="https://hooks.slack.com/services/..."

🛠️ 前提条件

  1. GitHub CLI：brew install gh
  2. jq：brew install jq (用于通知推送)
  3. Git：已配置远程仓库
  4. 认证：gh auth login

📝 使用示例

完整的 PR 工作流

# 1. 创建功能分支
git checkout -b feature/my-feature

# 2. 提交代码
git commit -m "Add new feature"
git push origin feature/my-feature

# 3. 创建 PR
github-pr-push.sh create feature/my-feature --issue 123

# 4. 下载代码审查
github-review.sh download 123
cd ~/github-pr-download/pr-123
# ... 进行代码审查 ...

# 5. 批准 PR
github-review.sh approve 123

# 6. 合并 PR
github-pr-push.sh merge 123

# 7. 清理已合并的分支
github-pr-cleanup.sh merged

# 8. 发送通知
github-notify.sh all --type pr --number 123 --status merged

多账户协作

# 列出所有账户
github-accounts.sh list

# 添加工作账户
github-accounts.sh add work

# 添加个人账户
github-accounts.sh add personal

# 切换到工作账户
github-accounts.sh switch work

# 切换到个人账户
github-accounts.sh switch personal

🐛 故障排除

1. gh CLI 未安装

brew install gh
gh auth login

2. jq 未安装

brew install jq

3. 远程仓库未配置

git remote add origin https://github.com/USER/REPO.git

4. 权限问题

# 验证认证状态
gh auth status

# 重新认证
gh auth login

📚 相关技能

  • laomo-github - 基础 GitHub 操作
  • clawhub - 技能管理

📄 许可证

MIT License

版本：v2.0 (2026-03-15)
维护者：老默科技
频道：Discord

安全使用建议
This skill appears to be what it claims (GitHub helper). Before installing or running it: 1) Review and back up any existing gh authentication (the scripts run gh auth logout/login and save account configs under ~/.config/github-accounts). 2) Use dry-run options first (the cleanup scripts include --dry-run) and avoid the automatic --yes flag until you are confident — cleanup scripts can delete remote branches and force-push. 3) Treat webhook env vars (DISCORD_WEBHOOK_URL, SLACK_WEBHOOK_URL, TELEGRAM_BOT_TOKEN/CHAT_ID, DINGTALK_WEBHOOK_URL) as secrets — only set them if you trust the receiving endpoint. 4) Run the scripts in a test repository or container first to verify behavior. 5) If you need higher assurance, inspect the full scripts line-by-line for any environment references or network calls in code paths you expect to run; check for typos or non-standard git/gh invocations before using in production.
功能分析
Type: OpenClaw Skill Name: laomo-github Version: 2.0.0 The skill bundle provides a comprehensive suite of GitHub automation tools for account management, PR workflows, and notifications. It is classified as suspicious due to significant shell injection vulnerabilities in github-notify.sh and github-pr-push.sh, where unquoted heredocs and unsanitized variables (such as PR titles, branch names, or issue descriptions) are used to construct command payloads. While these appear to be unintentional security flaws rather than intentional malware, they create a high-risk attack surface for prompt injection if the AI agent processes untrusted repository data. Additionally, github-accounts.sh performs high-privilege actions by manipulating the GitHub CLI (gh) authentication state and storing account metadata locally.
能力评估
✓ Purpose & Capability
Name/description (GitHub multi-account, PR push/cleanup/review/notify) match the shipped scripts: account management, PR push/merge, cleanup (branch deletions), review (download/check out PR), and notification sending. The included gh/git/jq usage and webhook support are consistent with that purpose.
ℹ Instruction Scope
SKILL.md and the scripts instruct the agent/user to run gh and git commands, checkout PRs, push/force-push, delete remote branches, and run gh auth logout/login for switching accounts. Those actions are expected for this toolset but are powerful/destructive (remote branch deletion, merge/force operations, logging out current gh auth). The instructions also suggest setting webhook env vars (Discord/Slack/Telegram/DingTalk) and sending data to those endpoints; webhooks are user-supplied. There is no evidence the skill reads unrelated system secrets or exfiltrates data to unknown third-party endpoints.
✓ Install Mechanism
No install spec; code is provided as scripts that run locally. There are no downloads from external/untrusted URLs or archives. The scripts assume gh and jq are installed (documented). This local-script approach is lower risk than a remote download installer.
ℹ Credentials
The registry metadata lists no required environment variables, while SKILL.md and scripts reference optional webhook env vars (DISCORD_WEBHOOK_URL, DINGTALK_WEBHOOK_URL, TELEGRAM_BOT_TOKEN/CHAT_ID, SLACK_WEBHOOK_URL). These are plausible and proportional for notification features, but they are sensitive (webhook tokens). The scripts do not directly read arbitrary unrelated credentials, nor do they embed hard-coded external secrets.
✓ Persistence & Privilege
always is false and model/agent invocation is not disabled — normal for skills. The skill writes its own config under the user's home (~/.config/...), which is expected for account/PR download storage and is within scope; it does not modify other skills or global agent settings.
如何使用
  1. 确保已安装 OpenClaw（本地或 Docker 部署）
  2. 在对话框中输入安装命令：/install laomo-github
  3. 安装完成后，直接呼叫该 Skill 的名称或使用 /laomo-github 触发
  4. 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.0.0
laomo-github v2.0.0 introduces a major upgrade with multi-account management, PR tooling, code review, and notification automation. - Added 5 dedicated script tools: multi-account manager, PR push, PR cleanup, code review, and notification sending. - Greatly expanded documentation with structured usage examples, command references, and troubleshooting. - Supports team workflows: PR lifecycle automation, code review flows, and integrated notification delivery to Discord, Dingtalk, Telegram, and Slack. - Provides shell scripts for all major features for improved automation and modular tooling. - Upgraded metadata and documentation for clear skill structure and operation guidance.
v1.0.0
Initial release of laomo-github skill. - Provides instructions to interact with GitHub using the `gh` CLI. - Covers handling pull requests, checking CI status, and listing workflow runs. - Includes examples for advanced queries using `gh api`. - Shows how to output results in JSON and filter with `--jq`.
元数据
Slug laomo-github
版本 2.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Github 是什么？

老默 GitHub 助手 - 多账户管理、PR 一键推送/清理、代码审查、通知推送。v2.0 完整功能。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 295 次。

如何安装 Github？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install laomo-github」即可一键安装，无需额外配置。

Github 是免费的吗？

是的，Github 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

Github 支持哪些平台？

Github 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Github？

由 mrzhangkris（@mrzhangkris）开发并维护，当前版本 v2.0.0。

推荐 Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191113 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 留言讨论