← 返回 Skills 市场
github-mcp
作者
zwj-opener
· GitHub ↗
· v0.1.0
· MIT-0
59
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install zwj-github-mcp
功能描述
Use the GitHub MCP server (github-mcp-server) to browse repositories, manage issues and PRs, analyze code, search files, monitor CI/CD workflows, and automat...
安全使用建议
Do not install or use this skill until you verify two things: (1) confirm the correct, trusted endpoint for the MCP gateway — 'https://api.githubcopilot.com/mcp/' is unexpected for direct GitHub API operations; verify that domain is official and intended to receive your GITHUB_TOKEN, or prefer the local stdio server. (2) The skill requires a GITHUB_TOKEN at runtime but the registry metadata does not declare that credential — ask the publisher to declare any required env vars and explain where tokens are sent. If you proceed, prefer running a local github-mcp-server you downloaded from the official repo, restrict the token scopes to the minimum needed, and consider using an ephemeral token. If you cannot verify the endpoint and publisher, do not provide long-lived or broad-scope tokens to this skill. Additional information that would raise confidence to 'benign': an authoritative homepage/publisher, metadata declaring GITHUB_TOKEN as required, and confirmation that the HTTP endpoint is an official and audited gateway (or guidance to prefer only the local stdio server).
功能分析
Type: OpenClaw Skill
Name: zwj-github-mcp
Version: 0.1.0
The skill bundle provides a standard interface for GitHub operations via the Model Context Protocol (MCP), supporting both local stdio and remote HTTP configurations. The documentation in SKILL.md and references/tools.md correctly outlines repository management, issue tracking, and CI/CD monitoring using legitimate GitHub endpoints (api.githubcopilot.com) and official server references. No evidence of data exfiltration, malicious command execution, or prompt injection was found.
能力评估
Purpose & Capability
Name/description match the provided mcporter tool schema (repo/issue/PR/CI operations). However the skill metadata declares no required credentials or config, while the SKILL.md and tools reference explicitly require a GITHUB_TOKEN (or Authorization header). That mismatch (declared requirements vs runtime requirements) is incoherent.
Instruction Scope
SKILL.md instructs the agent/operator to add a remote HTTP MCP endpoint with an Authorization header containing ${GITHUB_TOKEN}, or to run a local stdio server. This means the skill will direct GitHub credentials to an endpoint (https://api.githubcopilot.com/mcp/) not documented in metadata. Instructions do not ask to read unrelated local files, but they do require transmitting a sensitive token to a remote host if using the HTTP option.
Install Mechanism
No install spec or code files — instruction-only skill — so nothing is automatically downloaded or executed by the registry. The SKILL.md suggests downloading a server from a GitHub releases page (legitimate pattern), or using an existing local binary; that is reasonable but relies on the operator to fetch and run external code.
Credentials
The runtime clearly requires a GITHUB_TOKEN (sensitive credential) for all operations, yet the skill metadata lists no required env vars or primary credential. The skill also suggests sending that token to a remote domain (api.githubcopilot.com) instead of the standard GitHub API endpoint, which amplifies the risk if the domain is not a trusted/official host.
Persistence & Privilege
No elevated privileges requested in metadata (always:false). The skill is user-invocable and can be invoked autonomously by the agent (platform default), which is expected for skills. The skill does not request installation or modification of other skills.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install zwj-github-mcp - 安装完成后，直接呼叫该 Skill 的名称或使用
/zwj-github-mcp触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release
元数据
常见问题
github-mcp 是什么？
Use the GitHub MCP server (github-mcp-server) to browse repositories, manage issues and PRs, analyze code, search files, monitor CI/CD workflows, and automat... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 59 次。
如何安装 github-mcp？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install zwj-github-mcp」即可一键安装，无需额外配置。
github-mcp 是免费的吗？
是的，github-mcp 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
github-mcp 支持哪些平台？
github-mcp 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 github-mcp？
由 zwj-opener（@zwj-opener）开发并维护，当前版本 v0.1.0。
推荐 Skills