← 返回 Skills 市场
109
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pr-pilot
功能描述
Submit professional pull requests and manage their full lifecycle — from push to merge. Covers PR creation with structured descriptions, CI monitoring, revie...
安全使用建议
This skill appears to be a legitimate PR workflow, but the published metadata fails to declare that it needs the GitHub CLI and a GH_TOKEN. Before installing or running it: (1) verify you or the agent will only provide a least-privilege GitHub token (restrict scopes to what's necessary, e.g., repo: statuses if possible), (2) prefer running the gh/git commands yourself in a local clone rather than handing your token to an automated agent, (3) confirm the agent will not exfiltrate tokens or run commands on unrelated repos, (4) inspect any prompts or generated /tmp/pr_body.md content before allowing push/create actions, and (5) ask the skill author/registry to update the metadata to explicitly declare required binaries (gh) and required env (GH_TOKEN, GITHUB_USERNAME) so the runtime expectations match what the skill actually does.
功能分析
Type: OpenClaw Skill
Name: pr-pilot
Version: 1.0.0
The 'pr-pilot' skill is a legitimate tool designed to automate the GitHub Pull Request lifecycle using the GitHub CLI (gh). It provides structured instructions for committing code, creating PRs with detailed templates, monitoring CI status, and managing review responses. While it requires a GitHub token for operation, this is standard for the task, and there is no evidence of data exfiltration, malicious execution, or prompt injection in SKILL.md.
能力评估
Purpose & Capability
The skill's stated purpose (create and manage GitHub PRs) legitimately requires Git and the GitHub CLI plus a GitHub token; the instructions reflect that. However, the registry metadata lists no required binaries or environment variables, which is inconsistent with the actual runtime needs.
Instruction Scope
SKILL.md instructs the agent/user to run git and gh commands, push branches, create PR bodies in /tmp/pr_body.md, and to obtain/set a GH_TOKEN and GitHub username. Those instructions are within the PR-management purpose, but they reference an environment secret (GH_TOKEN) and local repo operations even though those were not declared in the skill manifest — a scope mismatch that could be surprising to users or to automated policy checks.
Install Mechanism
This is an instruction-only skill with no install spec and no code files. That reduces risk from hidden downloads or installs; nothing is written to disk by the skill package itself.
Credentials
Although the runtime requires a GitHub personal access token and a username, the skill did not declare any required environment variables or a primary credential. A GH token grants access to repositories and (depending on scopes) can modify code — requesting or using such a token should be declared explicitly and scoped minimally.
Persistence & Privilege
The skill does not request always: true, does not install persistent components, and is user-invocable. Agent autonomous invocation is allowed by default (disable-model-invocation=false) but that is expected platform behavior and not, by itself, an additional red flag here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pr-pilot - 安装完成后，直接呼叫该 Skill 的名称或使用
/pr-pilot触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of **pr-pilot**, a skill for professional pull request (PR) submission and management.
- Guides users through structured PR creation, including templates for descriptions, root cause analysis, and file change summaries.
- Details best practices for CI monitoring, responding to code reviews, and managing iterative code changes.
- Includes practical shell workflows and GitHub CLI commands for the full PR lifecycle: push, open, review, iterate, and merge.
- Provides review response patterns and troubleshooting for CI, merge conflicts, and feedback incorporation.
- Offers organizational tools for tracking multiple open PRs across repositories.
元数据
常见问题
pr-pilot 是什么？
Submit professional pull requests and manage their full lifecycle — from push to merge. Covers PR creation with structured descriptions, CI monitoring, revie... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 109 次。
如何安装 pr-pilot？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pr-pilot」即可一键安装，无需额外配置。
pr-pilot 是免费的吗？
是的，pr-pilot 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
pr-pilot 支持哪些平台？
pr-pilot 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 pr-pilot？
由 Bijin（@sliverp）开发并维护，当前版本 v1.0.0。
推荐 Skills