← 返回 Skills 市场
martok9803

CI Whisperer

作者 MartinKirov · GitHub ↗ · v0.2.0
cross-platform ✓ 安全检测通过
632
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install martok9803-ci-whisperer
功能描述
Analyze GitHub Actions failures and propose fixes. Use when a user shares a failing GitHub Actions run URL/id, says 'CI is failing', asks 'why did this workf...
使用说明 (SKILL.md)

CI Whisperer

Fetch GitHub Actions run details, pinpoint the failure, and propose a minimal fix.

This skill is meant to feel like a senior engineer doing a fast “CI autopsy”.

Modes

Read-only mode (default)

  • Collect evidence, explain root cause, propose fixes.
  • No pushes, no PRs, no branch creation.

PR fix mode (opt-in)

PR fix mode is allowed only when both are true:

  1. The user explicitly asks to open a PR.
  2. A local toggle is enabled (the “on/off button”):
    • env var: CI_WHISPERER_WRITE=1

If the toggle is not enabled, refuse politely and explain how to enable it.

Workflow

1) Identify target run

Accept any of:

  • workflow run URL
  • run id
  • PR number (then locate latest run)

Always determine:

  • owner/repo
  • run id

If the user didn’t specify the repo, ask for it (or infer from context).

2) Gather evidence (tool-backed)

Prefer deterministic tooling. Use /usr/bin/gh when the system has multiple gh binaries.

Suggested commands:

  • gh run view \x3Crun-id> --repo owner/repo --json status,conclusion,createdAt,updatedAt,event,headBranch,headSha,url,name
  • gh run view \x3Crun-id> --repo owner/repo --log-failed
  • gh run view \x3Crun-id> --repo owner/repo --log (only if needed; can be noisy)

If gh is not authenticated, stop and ask the user to run:

  • /usr/bin/gh auth login

3) Produce a "CI Autopsy" report

Return:

  • failing job(s) and step(s)
  • the exact error excerpt (short; redact secrets)
  • likely root cause(s) ranked
  • minimal fix options
  • confidence level

4) (Optional) Open a PR (only with explicit approval + write toggle)

If the user asks to fix it and CI_WHISPERER_WRITE=1:

  • create a branch
  • apply minimal changes
  • run local lint/tests if available
  • open PR with a clear description and link to the failing run

If the user asks but write mode is OFF:

  • provide the patch/diff instructions, but do not push.

Safety

  • Never print tokens.
  • Don’t open PRs or push changes unless explicitly requested.
  • If logs contain secrets, redact before quoting.

Bundled scripts

Use scripts for repeatable fetching and parsing:

  • scripts/ci_autopsy.py (fetch run metadata + failed logs)
安全使用建议
This skill is coherent with its stated purpose, but review the following before installing: 1) It relies on the GitHub CLI (`gh`) and your gh-authenticated account — the metadata didn’t declare that dependency, so ensure `gh` is present and authenticated. 2) Logs can contain secrets; the SKILL.md tells the agent to redact secrets but the helper script prints raw logs. Don’t enable automated PR creation (set CI_WHISPERER_WRITE=1) unless you trust the session and are prepared for the agent to create branches/PRs; enable it only for sessions where you want that behavior. 3) If you will allow PR creation, consider reviewing the generated diff/patch locally before pushing. If you want higher assurance, request the maintainer add automatic log-redaction and update metadata to declare `gh` and the optional env var.
功能分析
Type: OpenClaw Skill Name: martok9803-ci-whisperer Version: 0.2.0 The OpenClaw AgentSkills bundle 'ci-whisperer' is classified as benign. The `SKILL.md` clearly outlines a legitimate purpose (analyzing GitHub Actions failures) and implements robust safety measures, such as requiring explicit user approval and an environment variable (`CI_WHISPERER_WRITE=1`) for any write operations (e.g., creating PRs). The `scripts/ci_autopsy.py` script uses the GitHub CLI (`gh`) in a read-only capacity, explicitly preferring `/usr/bin/gh` to prevent path hijacking, and uses `subprocess.run` with a list of arguments, which is a safer method against shell injection. There is no evidence of malicious intent, data exfiltration, unauthorized execution, or prompt injection designed to bypass security controls.
能力评估
ℹ Purpose & Capability
The name/description match the included instructions and the bundled script: both rely on the GitHub CLI to fetch run metadata and failed logs and to optionally create branches/PRs. However, the registry metadata declares no required binaries or env vars even though SKILL.md and the script explicitly rely on the `gh` CLI and an optional env var `CI_WHISPERER_WRITE` — those runtime dependencies are not reflected in the metadata.
⚠ Instruction Scope
Instructions are narrowly scoped to fetching run details/logs and producing a report; PR creation is gated behind explicit user approval and the CI_WHISPERER_WRITE toggle. However, SKILL.md instructs the agent to redact secrets while the included script simply prints raw `gh run view --log-failed` output (no automatic redaction). That creates an operational risk: logs can contain secrets or tokens and the tool does not sanitize them automatically — the agent/user must do the redaction.
✓ Install Mechanism
No install spec (instruction-only plus a small helper script). No downloads or external installers. Low risk from install mechanism.
ℹ Credentials
The skill does not request secrets in metadata and relies on the host's `gh` authentication (user's GitHub credentials) — which is expected. The SKILL.md references an optional `CI_WHISPERER_WRITE` env var to enable write/PR mode, but this env var is not declared in the registry metadata (minor inconsistency). The bundled script itself does not read environment variables aside from preferring /usr/bin/gh.
✓ Persistence & Privilege
always:false and no modification of other skill/system configurations. The skill does not request persistent or elevated privileges. Autonomous invocation is allowed (platform default) but is not combined with other red flags.
如何使用
  1. 确保已安装 OpenClaw（本地或 Docker 部署）
  2. 在对话框中输入安装命令：/install martok9803-ci-whisperer
  3. 安装完成后，直接呼叫该 Skill 的名称或使用 /martok9803-ci-whisperer 触发
  4. 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.2.0
Add PR fix mode toggle docs + improved README.
v0.1.0
Initial public release.
元数据
Slug martok9803-ci-whisperer
版本 0.2.0
许可证 —
累计安装 0
当前安装数 0
历史版本数 2
常见问题

CI Whisperer 是什么？

Analyze GitHub Actions failures and propose fixes. Use when a user shares a failing GitHub Actions run URL/id, says 'CI is failing', asks 'why did this workf... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 632 次。

如何安装 CI Whisperer？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install martok9803-ci-whisperer」即可一键安装，无需额外配置。

CI Whisperer 是免费的吗？

是的，CI Whisperer 完全免费（开源免费），可自由下载、安装和使用。

CI Whisperer 支持哪些平台？

CI Whisperer 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 CI Whisperer？

由 MartinKirov（@martok9803）开发并维护，当前版本 v0.2.0。

推荐 Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463942 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259883 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200739 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191401 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190375 · by oswalpalash

💬 留言讨论