37/100 (High)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： suspicious

The skill's code largely matches its GitHub-management purpose, but the package/registry metadata underreports required credentials and runtime requirements and there are unsafe patterns (unsanitized ...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.dynamic_code_execution

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773288711433,
        "_id": "k9700ze5dm3dffhec94dgmqx1n82sepc",
        "changelog": "# Changelog\n\nAll notable changes to this project will be documented in this file.\n\nThe format is based on [Keep a Changelog](https:\/\/keepachangelog.com\/en\/1.1.0\/),\nand this project adheres to [Semantic Versioning](https:\/\/semver.org\/spec\/v2.0.0.html).\n\n## [Unreleased]\n\n_No unreleased changes yet._\n\n---\n\n## [1.0.0] - 2025-03-12\n\n### Added\n\n- **Repository management**\n  - `repos list`: List all repositories for the authenticated user\n  - `repos create`: Create new repository with Node gitignore and MIT license, optional description and private flag\n\n- **Code review**\n  - `review pr`: Review pull requests with file change summary (+\/- lines)\n  - Automatic suggestions: tests for large PRs, documentation updates, large file warnings, config change reminders\n  - File type hints (JS\/TS, Markdown, JSON)\n\n- **Changelog**\n  - `changelog generate`: Generate changelog from commit history\n  - Categorization: New Features, Bug Fixes, Breaking Changes, Other\n  - Optional `--since` tag to limit range\n\n- **Issue management**\n  - `issues list`: List open issues with labels and creation date\n  - `issues create`: Create issue with title, body, and labels\n  - `issues close`: Close issue by number\n\n- **CI\/CD**\n  - `ci setup`: Generate `.github\/workflows\/` with `ci.yml` and `deploy.yml`\n  - CI workflow: Node 18.x\/20.x matrix, test + lint, build on main\n  - Deploy workflow: Trigger on version tags (`v*`), build and deploy placeholder\n\n- **Configuration**\n  - `config`: Save GitHub token, username, and optional default repo to `.github-manager.json`\n  - Config template: `config-template.json` with environments, review\/changelog\/CI\/issue\/project settings\n\n- **Standalone scripts**\n  - `scripts\/project-manager.js`: Projects v2 API, list\/create projects, boards, milestones, weekly reports\n  - `scripts\/code-review.js`: Standalone PR code review with detailed analysis\n  - `scripts\/generate-changelog.js`: Local git-based changelog generation with configurable types and template\n\n- **CLI**\n  - Global `github` command via `npm link`\n  - `--repo owner\/repo` and default repo support\n  - Inline help when no valid subcommand is given\n\n### Dependencies\n\n- `@octokit\/rest` ^20.0.2 — GitHub API\n- `commander` ^11.0.0 — CLI parsing\n- `chalk` ^4.1.2 — Terminal colors\n- `inquirer` ^8.2.6, `ora` ^5.4.1, `figlet` ^1.6.0, `boxen` ^5.1.2 — UX\n\n### Requirements\n\n- Node.js >= 14.0.0\n- GitHub Personal Access Token with `repo` scope",
        "changelogSource": "user",
        "createdAt": 1773288711433,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "shiiyyo",
        "handle": "shiiyyo",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/198002361?v=4",
        "kind": "user",
        "linkedUserId": "kn72vx08te07h4777hv0ehf1kn82cj10"
    },
    "ownerHandle": "shiiyyo",
    "skill": {
        "_creationTime": 1773288711433,
        "_id": "kd77c7zk45net4zsd0gmkyqqfh82sc5x",
        "badges": [],
        "createdAt": 1773288711433,
        "displayName": "AutoGitHub",
        "latestVersionId": "k9700ze5dm3dffhec94dgmqx1n82sepc",
        "ownerUserId": "kn72vx08te07h4777hv0ehf1kn82cj10",
        "slug": "github-manager",
        "stats": {
            "comments": 0,
            "downloads": 205,
            "installsAllTime": 1,
            "installsCurrent": 1,
            "stars": 0,
            "versions": 1
        },
        "summary": "全面管理GitHub仓库，支持自动代码审查、部署、changelog生成、CI\/CD配置、Bug跟踪和项目管理自动化。",
        "tags": {
            "latest": "k9700ze5dm3dffhec94dgmqx1n82sepc"
        },
        "updatedAt": 1774332266259
    }
}