openclaw-pr-maintainer
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
gh(GitHub CLI) andgitcrawlto interact with GitHub issues and PRs. These are standard tools for open-source maintenance tasks. - [EXTERNAL_DOWNLOADS]: The skill references standard GitHub API endpoints via
gh apiand fetches public metadata about contributors to help maintainers identify legitimate accounts versus bot activity. - [COMMAND_EXECUTION]: The script
scripts/github-activity.shuses standard shell commands (date,jq,gh,awk) to calculate account age and activity metrics for triage purposes. This is a common and safe pattern for maintainer automation. - [PROMPT_INJECTION]: The skill contains logic to suppress issues authored by a specific list of top maintainers during general triage to prioritize external user feedback. This is a project-specific workflow rule rather than a malicious instruction override.
Audit Metadata