Reporead

Analyze GitHub repositories using RepoRead AI. Use when the user asks to "analyze a repo", "generate docs", "security audit a repo", "create a README", or wa...

This skill appears to do what it says: it calls https://api.reporead.com and needs a RepoRead API key. Before installing, consider: 1) storing the API key in your shell profile or MCP config will persist it on disk in plaintext — only do this if you trust the host and want persistent access; 2) importing repositories sends repo content to a third-party service — avoid importing private/confidential repos unless you trust RepoRead and understand their data handling; 3) the included helper scripts attempt to sanitize inputs but input checks are simple and may reject some valid inputs or be imperfect — avoid passing untrusted, specially crafted IDs/URLs; 4) rotate the key if you suspect it was exposed and review RepoRead's privacy/security docs. If you need stronger guarantees, inspect the scripts yourself and prefer setting REPOREAD_API_KEY in a secure secrets store rather than embedding it in config files.

Type: OpenClaw Skill Name: reporead Version: 1.2.0 The 'reporead' skill is a legitimate integration for the RepoRead AI service, designed to analyze GitHub repositories. The shell scripts (scripts/reporead-api.sh and scripts/check-connection.sh) use curl to interact with the official API endpoint (api.reporead.com) and include proactive security measures such as input sanitization and path validation to prevent command injection.