gh-issues
Automates GitHub issue management by fetching issues, implementing fixes, and handling PR reviews using sub-agents.
Install this skill
Security score
The gh-issues skill was audited on Mar 8, 2026 and we found 31 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 254 | ``` |
Template literal with variable interpolation in command context
| 289 | ``` |
Template literal with variable interpolation in command context
| 376 | ``` |
Template literal with variable interpolation in command context
| 387 | ``` |
Template literal with variable interpolation in command context
| 747 | ``` |
Template literal with variable interpolation in command context
| 755 | ``` |
Curl to non-GitHub URL
| 210 | curl -s -o /dev/null -w "%{http_code}" -H "Authorization: Bearer $GH_TOKEN" https://api.github.com/user |
Curl to non-GitHub URL
| 647 | curl -s -H "Authorization: Bearer $GH_TOKEN" https://api.github.com/user | jq -r '.login' |
Access to hidden dotfiles in home directory
| 82 | cat ~/.openclaw/openclaw.json | jq -r '.skills.entries["gh-issues"].apiKey // empty' |
Access to hidden dotfiles in home directory
| 117 | > "GitHub authentication failed. Please check your apiKey in the OpenClaw dashboard or in ~/.openclaw/openclaw.json under skills.entries.gh-issues." |
Access to hidden dotfiles in home directory
| 215 | > "GitHub authentication failed. Please check your apiKey in the OpenClaw dashboard or in ~/.openclaw/openclaw.json under skills.entries.gh-issues." |
Access to hidden dotfiles in home directory
| 349 | GH_TOKEN=$(cat ~/.openclaw/openclaw.json 2>/dev/null | jq -r '.skills.entries["gh-issues"].apiKey // empty') || GH_TOKEN=$(cat /data/.clawdbot/openclaw.json 2>/dev/null | jq -r '.skills.entries["gh-is |
Access to hidden dotfiles in home directory
| 378 | GH_TOKEN=$(cat ~/.openclaw/openclaw.json 2>/dev/null | jq -r '.skills.entries["gh-issues"].apiKey // empty') |
Access to hidden dotfiles in home directory
| 718 | GH_TOKEN=$(cat ~/.openclaw/openclaw.json 2>/dev/null | jq -r '.skills.entries["gh-issues"].apiKey // empty') || GH_TOKEN=$(cat /data/.clawdbot/openclaw.json 2>/dev/null | jq -r '.skills.entries["gh-is |
Access to hidden dotfiles in home directory
| 749 | GH_TOKEN=$(cat ~/.openclaw/openclaw.json 2>/dev/null | jq -r '.skills.entries["gh-issues"].apiKey // empty') |
External URL reference
| 101 | "https://api.github.com/repos/{SOURCE_REPO}/issues?per_page={limit}&state={state}&{query_params}" |
External URL reference
| 192 | git remote add fork https://x-access-token:[email protected]/{PUSH_REPO}.git |
External URL reference
| 210 | curl -s -o /dev/null -w "%{http_code}" -H "Authorization: Bearer $GH_TOKEN" https://api.github.com/user |
External URL reference
| 222 | "https://api.github.com/repos/{SOURCE_REPO}/pulls?head={PUSH_REPO_OWNER}:fix/issue-{N}&state=open&per_page=1" |
External URL reference
| 238 | "https://api.github.com/repos/{PUSH_REPO}/branches/fix/issue-{N}" |
External URL reference
| 431 | git remote set-url {PUSH_REMOTE} https://x-access-token:[email protected]/{PUSH_REPO}.git |
External URL reference
| 450 | https://api.github.com/repos/{SOURCE_REPO}/pulls \ |
External URL reference
| 595 | "https://api.github.com/repos/{SOURCE_REPO}/pulls?state=open&per_page=100" |
External URL reference
| 612 | "https://api.github.com/repos/{SOURCE_REPO}/pulls/{pr_number}/reviews" |
External URL reference
| 619 | "https://api.github.com/repos/{SOURCE_REPO}/pulls/{pr_number}/comments" |
External URL reference
| 626 | "https://api.github.com/repos/{SOURCE_REPO}/issues/{pr_number}/comments" |
External URL reference
| 637 | "https://api.github.com/repos/{SOURCE_REPO}/pulls/{pr_number}" |
External URL reference
| 647 | curl -s -H "Authorization: Bearer $GH_TOKEN" https://api.github.com/user | jq -r '.login' |
External URL reference
| 783 | git remote set-url {PUSH_REMOTE} https://x-access-token:[email protected]/{PUSH_REPO}.git |
External URL reference
| 792 | https://api.github.com/repos/{SOURCE_REPO}/pulls/{pr_number}/comments/{comment_id}/replies \ |
External URL reference
| 799 | https://api.github.com/repos/{SOURCE_REPO}/issues/{pr_number}/comments \ |
Install this skill with one command
/learn @protocolsage/gh-issues