by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears coherent for triaging GitHub issues, but check a few things before installing or running it: 1) Ensure the GitHub CLI (gh) is installed and authenticated. The SKILL.md assumes gh auth or a GH_TOKEN — provide a token with the least privilege needed (prefer read-only issue/repo scopes). Avoid giving broad write/delete scopes. 2) Clarify repository access: the instructions expect the agent to inspect source files but do not include clone steps; confirm whether you must provide th...详细分析 ▾
✓ 用途与能力
Name and description match the actions in SKILL.md: fetching GitHub issues via the gh CLI, scoring them, and writing an analysis document. Required capabilities (gh CLI + GitHub auth) are appropriate for the stated goal.
ℹ 指令范围
Instructions are generally scoped to issue fetching, scoring, thread reading, and producing `{workspace}/issue-analysis.md`. However, the deep-dive step expects the agent to 'identify relevant source files' and 'search the codebase' but does not specify how to obtain or access the repository source (no explicit git clone or path assumptions). This is a functional gap: the skill assumes either the workspace already contains the repo or the agent will clone it; clarify which is expected.
✓ 安装机制
Instruction-only skill with no install steps, no downloads, and no code to execute. This is low install risk.
ℹ 凭证需求
SKILL.md asks the user to authenticate gh and mentions GH_TOKEN as an option, but the registry metadata declares no required environment variables. This is reasonable but inconsistent: the skill will need a GitHub-authenticated gh session (or token) to operate at scale. Users should provide a minimally privileged token (read-only repo/issue scopes) if asked. No other secrets are requested.
✓ 持久化与权限
always:false and no install/config changes. The skill writes a single output file to the workspace (`issue-analysis.md`) which is appropriate for its function. It does not request elevated or persistent platform privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/24
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install issue-hunter
镜像加速npx clawhub@latest install issue-hunter --registry https://cn.longxiaskill.com镜像同步中