GitHub PR Manager

PassAudited by VirusTotal on May 8, 2026.

Overview

Type: OpenClaw Skill Name: gh-pr-flow Version: 1.0.1 The gh-pr-flow skill bundle provides a legitimate set of tools for managing GitHub Pull Request workflows using the official GitHub CLI (gh). The included scripts (gh-pr-create.py, gh-pr-review.sh, and gh-pr-changelog.py) use safe subprocess execution patterns and perform actions strictly aligned with the stated purpose of PR creation, review, and changelog generation. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

If used on the wrong repository, PR, or branch, the agent could approve or merge code, change labels, or push conflict-resolution changes that affect collaborators.

Why it was flagged

These documented commands can change repository state, publish reviews, merge code, enable auto-merge, or rewrite/update branches. They are aligned with PR management, but they are high-impact operations.

Skill content

gh pr review <number> --approve --body "LGTM"
...
gh pr merge <number> --squash
gh pr merge <number> --auto
...
git push --force-with-lease

Recommendation

Require explicit user confirmation for approvals, merges, auto-merge, label setup, and any force-with-lease push; verify the repo, PR number, branch, and CI status first.

NoteHigh Confidence

ASI03: Identity and Privilege Abuse

What this means

The skill can act as the currently authenticated GitHub user, including creating PRs and performing review or merge actions where that account has permission.

Why it was flagged

The skill relies on the user's existing authenticated GitHub CLI session, so actions run with that account's repository permissions.

Skill content

`gh` CLI installed and authenticated (`gh auth status`)

Recommendation

Use a GitHub account/token with the minimum repository permissions needed, and confirm the active gh account before running mutating commands.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Users may not realize before installation that the skill depends on local command-line tools and an authenticated GitHub session.

Why it was flagged

The metadata under-declares runtime expectations: the SKILL.md requires authenticated gh CLI access, and the included scripts also depend on gh, git, python3, and bash.

Skill content

Required binaries (all must exist): none ... Primary credential: none

Recommendation

Declare gh/git/python3/bash and GitHub authentication in metadata; users should verify the included scripts before use.