openclaw-pr-maintainer
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses 'gh' (GitHub CLI), 'gitcrawl', and a custom shell script to automate repository maintenance tasks.
- [DATA_EXPOSURE]: The skill fetches public GitHub profile data (name, creation date, activity stats) to assist maintainers in triaging issues. This uses official GitHub API endpoints via authenticated CLI tools.
- [PROMPT_INJECTION]: Instructions include directives to suppress items from specific maintainer accounts to focus on external reports. This is a functional filtering rule for triage and does not represent a malicious bypass or safety override.
- [COMMAND_EXECUTION]: The included script 'scripts/github-activity.sh' performs standard API calls to gather contribution statistics. It uses 'set -euo pipefail' and proper quoting for variable expansion, following shell scripting best practices.
Audit Metadata