65/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： clean

OpenClaw： suspicious

The skill generally does what its name says (rename merged branches) and only requires git/bash, but its messaging about not deleting branches contradicts the actual behavior which deletes the old rem...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： clean

No suspicious patterns detected.

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774828645857,
        "_id": "k971k5acavhca0hyhefb6pbycx83vhp7",
        "changelog": "# Release Notes: wip-ai-devops-toolbox v1.9.65\n\n**Fix release notes scaffold on protected branches**\n\nWhen `wip-release patch` runs on main without a RELEASE-NOTES file, it used to scaffold a\ntemplate directly in the working tree. On repos with branch guards (pre-commit hooks that\nblock commits to main), this scaffolded file could not be removed or committed. It would\nblock `git pull` and leave the working tree dirty. This has happened multiple times across\ndifferent repos.\n\nThe fix adds a branch check before scaffolding. If the current branch is main or master,\nwip-release now prints a clear error telling the user to write release notes on their\nfeature branch before merging, then exits non-zero without creating any files. The scaffold\nbehavior still works on feature branches, where it's actually useful.\n\n## Issues closed\n\n- Closes #223\n\n## How to verify\n\n```bash\n# On main, without release notes: should error, NOT scaffold\ncd any-repo && git checkout main\nwip-release patch\n# Expected: \"Release notes missing. Write RELEASE-NOTES-v*.md on your feature branch before merging.\"\n# Expected: no RELEASE-NOTES file created in working tree\n\n# On a feature branch: should scaffold as before\ngit checkout -b test\/scaffold-check\nwip-release patch\n# Expected: scaffolded template created\n```",
        "changelogSource": "user",
        "createdAt": 1774828645857,
        "parsed": {
            "clawdis": {
                "emoji": "🏷️",
                "requires": {
                    "bins": [
                        "git",
                        "bash"
                    ]
                }
            }
        },
        "version": "1.9.65"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s17620xzyc7kfan8m36at57m6n83h8he",
        "displayName": "Parker Todd Brooks",
        "handle": "parkertoddbrooks",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/585456?v=4",
        "kind": "user",
        "linkedUserId": "kn7b4mj57xb02gqhvjzgzkxq557zz95h"
    },
    "ownerHandle": "parkertoddbrooks",
    "skill": {
        "_creationTime": 1773281833260,
        "_id": "kd7bqrwwzfh5vkgk5k8s8akgvs82sgsd",
        "badges": [],
        "createdAt": 1773281833260,
        "displayName": "Post Merge Rename",
        "latestVersionId": "k971k5acavhca0hyhefb6pbycx83vhp7",
        "ownerPublisherId": "s17620xzyc7kfan8m36at57m6n83h8he",
        "ownerUserId": "kn7b4mj57xb02gqhvjzgzkxq557zz95h",
        "slug": "post-merge-rename",
        "stats": {
            "comments": 0,
            "downloads": 536,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 62
        },
        "summary": "Post-merge branch renaming. Appends --merged-YYYY-MM-DD to preserve history.",
        "tags": {
            "latest": "k971k5acavhca0hyhefb6pbycx83vhp7"
        },
        "updatedAt": 1774831610510
    }
}