技能详情(站内镜像,无评论)
作者:do_while_true @autoxj
许可证:MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本:v1.2.0
统计:⭐ 1 · 160 · 0 current installs · 0 all-time installs
⭐ 1
安装量(当前) 0
🛡 VirusTotal :良性 · OpenClaw :良性
Package:autoxj/gitcode-issue-reply
安全扫描(ClawHub)
- VirusTotal :良性
- OpenClaw :良性
OpenClaw 评估
The skill's code, runtime instructions, and requested credential (GITCODE_TOKEN) are coherent with its stated purpose of drafting and optionally posting GitCode issue comments; no signs of overt misdirection or unrelated credential requests were found.
目的
Name/description (generating issue reply drafts & optionally posting) align with requested env var GITCODE_TOKEN and the included scripts (fetching issues, preparing drafts, posting comments). No unrelated credentials, binaries, or external package installs are requested.
说明范围
SKILL.md prescribes running the included scripts and then reading a JSON output; that matches the shipped code. Notable behaviors that are within scope but worth attention: the prepare step requires downloading and analyzing images referenced in issue content (the scripts download images and convert to base64), and the skill calls an external DeepWiki MCP endpoint to enrich replies. The security_filter only flags sensitive patterns (and return…
安装机制
Instruction-only skill (no install spec). Code is included in the bundle and is executed directly; no external downloads or package installs are performed at install time.
证书
Only GITCODE_TOKEN is required (declared as primaryEnv). The token is used to call GitCode APIs (GET/POST). get_token additionally attempts to read Windows environment variables via PowerShell as a fallback on Windows — this is consistent with trying to obtain the same declared token, not an unrelated secret.
持久
The skill writes cache, knowledge-base files and downloaded images under its own SKILL_ROOT/temp_dir (persistent across runs). It does not request 'always: true' or modify other skills. Persisted files may contain issue text and base64-encoded images, so they could store potentially sensitive content locally; the code exposes configuration for cache TTL and dry-run.
综合结论
This skill appears to do what it says: fetch issue data, optionally download issue images, consult DeepWiki, produce a draft, and post comments only after explicit confirmation. Before installing, consider: 1) the skill will need a GitCode personal access token (GITCODE_TOKEN) with comment-posting scope — use a token with least privilege and rotate it if you stop using the skill; 2) the skill will download images referenced in issues and persi…
安装(复制给龙虾 AI)
将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「GitCode Issue Reply」。简介:Generate reply drafts for a single GitCode issue with similar-issue references;…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/autoxj/gitcode-issue-reply/SKILL.md
(来源:yingzhi8.cn 技能库)
SKILL.md
暂无本地缓存内容,可在后台执行详情同步。