OpenClaw GitHub Assistant

Query and manage GitHub repositories - list repos, check CI status, create issues, search repos, and view recent activity.

Review this skill before installing. Use the narrowest GitHub token possible, prefer public_repo if private repository access is not needed, and only enable it where you are comfortable with the assistant creating issues, repositories, and pull requests under your account. Treat pull-request creation as available even though the main docs do not list it.

Type: OpenClaw Skill Name: openclaw-github-assistant Version: 2.0.1 The skill is generally well-behaved, providing GitHub integration capabilities and including responsible security warnings in its documentation (SKILL.md, README.md). It correctly handles GitHub tokens from environment variables or OpenClaw config and communicates only with api.github.com. However, the `create_issue` action in `index.js` defines an `extra` parameter of type `object` without further schema validation. This `extra` object is directly spread into the JSON body of the GitHub API request in `api.js`. This vulnerability could allow a sophisticated prompt injection attack against the AI agent to inject arbitrary fields into the GitHub issue creation request, potentially leading to unintended actions (e.g., adding assignees or labels not explicitly requested by the user) if the token has the necessary scopes. This is a vulnerability, not evidence of intentional malice by the skill developer.