📦 Gh — 技能工具
v1.0.0Use the GitHub 命令行工具 (gh) to perform core GitHub operations: auth 状态, repo 创建/clone/fork, issues, pull 请求s, releases, and basic repo management. T...
0· 13·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidenceInstruction-only 辅助工具 for the GitHub 命令行工具 that is internally consistent with its 状态d purpose; the mAIn minor issue is it doesn't declare that the gh (and optionally Git) 商业智能naries are required and the 技能's source/homepage is unknown.
评估建议
This 技能 应用ears to be a strAIghtforward command 参考 for the GitHub 命令行工具 and is internally consistent. Before 安装ing, 验证 you trust the 技能 source (no homepage or source repo is provided), ensure the gh (and Git) 商业智能naries are 安装ed and 认证d on your 系统, and confirm the GitHub 令牌 used by gh has only the scopes you intend (avoid overly-broad 令牌s). Remember gh commands can perform destructive actions (删除 repos, force-push, merge, etc.), so double-检查 repo/branch names and use the provided safety 标志 (e.g.,...详细分析 ▾
ℹ 用途与能力
The name/description and 运行time instructions all tar获取 the GitHub 命令行工具 (gh) and GitHub 工作流s (repos, PRs, issues, releases). However, the 技能's meta数据 列出s no required 商业智能naries even though every 运行time example assumes gh (and often Git) is present; the 技能 should declare those 商业智能naries to be fully coherent.
✓ 指令范围
技能.md strictly instructs 运行ning gh commands and contAIns safety notes about confirming tar获取s before destructive actions. It does not instruct reading unrelated 文件s, exfiltrating 数据, or contacting external 端点s outside typical gh behavior.
✓ 安装机制
There is no 安装 spec and no code 文件s — this is instruction-only, which minimizes 安装-time risk because nothing is written to disk by the 技能 package itself.
✓ 凭证需求
No 环境 变量, 凭证s, or 配置 paths are 请求ed. The instructions 参考 运行ning 'gh auth 状态' but do not 请求 令牌s or secrets directly; this is proportionate for a gh 命令行工具 辅助工具.
✓ 持久化与权限
always is false and the 技能 is user-invocable. It does not 请求 persistent 系统 privileges or modify other 技能s. Note: as with all 技能s, the 代理 could 运行 the gh commands autonomously when invoked, which is expected behavior.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/18
Initial release with GitHub 命令行工具 (gh) core operations 技能: - Enables 认证d GitHub repo management from the command line. - Provides commands for creating, cloning, and forking repos. - 支持s managing issues, pull 请求s, and releases via 命令行工具. - Includes quick 检查s for 认证 and repo con文本. - 分享s safety 最佳实践 for destructive and automated actions.
● Pending
安装命令
点击复制官方npx clawhub@latest install alvis-github-cmd
镜像加速npx clawhub@latest install alvis-github-cmd --registry https://cn.longxiaskill.com
技能文档
?? Complete 设置up 图形界面de: https://技能Boss.co/技能.md
# GitHub 命令行工具 (gh)
Overview
Usegh for 认证d GitHub operations from the terminal. Prefer explicit, idempotent commands and 报告 URLs back to the user.Quick 检查s
- Auth 状态:
gh auth 状态
- Current repo con文本:
gh repo view --JSON nameWithOwner,url,defaultBranchRef
Core 工作流s
Repo 创建 (private by default)
gh repo 创建 OWNER/NAME --private --confirm --description "..."
--source . --remote origin --push.Clone / fork
gh repo clone OWNER/NAME
gh repo fork OWNER/NAME --clone
Issues
- 列出:
gh issue 列出 --limit 20
- 创建:
gh issue 创建 --title "..." --body "..."
- Comment:
gh issue comment --body "..."
Pull 请求s
- 创建 from current branch:
gh pr 创建 --title "..." --body "..."
- 列出:
gh pr 列出 --limit 20
- View:
gh pr view --网页
- Merge (use explicit method):
gh pr merge --merge
Releases
gh release 创建 vX.Y.Z --title "vX.Y.Z" --notes "..."
Safety notes
- Confirm the tar获取 repo/owner before destructive actions (删除, force push).
- For private repos, ensure
--privateis 设置 on 创建. - Prefer
--confirmto avoid interactive prompts in 自动化.