Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Gitea

Interact with Gitea using the `tea` CLI. Use `tea issue`, `tea pr`, `tea actions`, and `tea api` for issues, PRs, Actions, and advanced queries.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 803 · 1 current installs · 1 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description describe using the tea CLI for Gitea operations; required binary (tea) and install methods (brew or go module code.gitea.io/tea) match that purpose and are proportionate.
Instruction Scope
SKILL.md only shows example tea commands (pulls, pr, issues, actions, api, login). It does not instruct reading unrelated files, accessing unrelated env vars, or sending data to unknown endpoints. It does mention using jq for local filtering but does not claim jq is required.
Install Mechanism
Installers are standard: Homebrew formula 'tea' and a Go module from the official code.gitea.io path. Both are expected ways to obtain the tea CLI and are not high-risk download-from-arbitrary-URL installs.
Credentials
No environment variables or credentials are declared. The skill demonstrates using a Gitea token via 'tea login add', which is appropriate for interacting with Gitea and does not request unrelated secrets.
Persistence & Privilege
Skill does not request always: true and does not modify other skills or system-wide settings. Default autonomous invocation is allowed (platform default) but is not excessive for this kind of integration.
Assessment
This skill is coherent: it simply shows how to use the tea CLI to interact with Gitea. Before installing/using it: (1) ensure you trust the Homebrew or Go source used to install tea; (2) be aware that tea commands (e.g., actions secrets list) will access repository secrets/metadata if your configured login has permission—only add tokens you trust and store them securely; (3) the SKILL.md mentions using jq for filtering but doesn't declare it as required, so install jq if you need to run the example pipeline; and (4) if you are uncomfortable with the agent invoking the skill autonomously, restrict user-invocation or review calls the skill makes that perform write actions (e.g., creating PRs/issues) before allowing them.

Like a lobster shell, security has layers — review code before you run it.

Current versionv0.1.0
Download zip
latestvk973xrb0pvyerzm8cxw1q4jgan80v68z

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🍵 Clawdis
Binstea

Install

Install Tea CLI (brew)
Bins: tea
brew install tea
Install Tea CLI (go)
Bins: tea
go install code.gitea.io/tea@latest

SKILL.md

Gitea Skill

Use the tea CLI to interact with Gitea instances. The tea CLI is the official command-line tool for Gitea.

Pull Requests

List open pull requests:

tea pulls --repo owner/repo

Check details of a PR:

tea pr 55 --repo owner/repo

Issues

List open issues:

tea issues --repo owner/repo

View an issue:

tea issue 123 --repo owner/repo

Actions (CI/CD)

List repository secrets:

tea actions secrets list --repo owner/repo

List repository variables:

tea actions variables list --repo owner/repo

API for Advanced Queries

The tea api command is useful for accessing data not available through other subcommands.

Get PR with specific fields (requires jq for filtering):

tea api repos/owner/repo/pulls/55 | jq '.title, .state, .user.login'

Logins

To use tea with a specific Gitea instance, you first need to add a login:

tea login add --name my-gitea --url https://gitea.example.com --token <your-token>

Then you can use --login my-gitea in your commands:

tea pulls --repo owner/repo --login my-gitea

List all configured logins:

tea logins

Files

1 total
Select a file
Select a file to preview.

Comments

Loading comments…