Openclaw Skills Github Sync

将 OpenClaw skills 同步到 GitHub（非实时，需手动确认）。 支持 Windows/Linux/Mac。 使用场景：skill 创建或修改完成后同步到 GitHub

Security Scan

The skill's code and instructions match its stated purpose (sync local OpenClaw skills to GitHub); it requires no extra credentials or installs and prompts before pushing, though you should still review .gitignore and remote settings before use.

Purpose & Capability

Name/description describe syncing skills to GitHub; included scripts implement an interactive setup and a sync routine that uses gh (for auth check) and git to commit and push. All requested/used items are appropriate for this purpose.

Instruction Scope

Runtime instructions and scripts operate on user-specified local directories, create a .gitignore if missing, show changes, and prompt for confirmation before committing. This is within scope, but the sync script does an unconditional 'git add -A' and 'git push origin main' after confirmation — users must ensure sensitive files are excluded and that 'origin/main' is the intended remote/branch.

Install Mechanism

No install spec; instruction-only skill with small shell scripts. Nothing is downloaded from arbitrary URLs and no archives are extracted.

Credentials

The skill declares no required environment variables or secrets. The setup script checks for the GitHub CLI (gh) and whether the user is authenticated; scripts read a local config.sh (created by the setup) or default to $HOME paths. No unrelated credentials or config paths are requested.

Persistence & Privilege

always:false and user-invocable. The skill does not modify other skills' configs or require persistent elevated privileges. It writes a local config.sh in its scripts directory to store paths (expected behavior).

Assessment

This skill appears to do what it says, but take these precautions before using: 1) Inspect the .gitignore it will create and add any additional patterns to ensure secrets are excluded (e.g., API keys, tokens, config files). 2) Confirm the PRIVATE_PATH/PUBLIC_PATH values saved in scripts/config.sh point to the intended directories. 3) Verify the git remote (git remote -v) and branch (main) are what you expect — the script runs 'git push origin main' which could push to an unintended remote/branch. 4) Run git status and review diffs before confirming the sync prompt. 5) If you use HTTPS remotes, ensure your credential helper / PAT is set up securely; if using SSH, ensure your SSH keys are correct. 6) Because the source repo is 'unknown' in the registry metadata, prefer cloning this into a non-production/testing environment first and review the files (as you already have) before trusting it with real data.

OpenClaw Skills GitHub Sync Skill

将你的 OpenClaw skills 同步到 GitHub

功能

• ✅ 交互式配置向导
• ✅ 支持私有仓库同步
• ✅ 支持公开仓库同步
• ✅ 手动确认同步（非实时，更安全）
• ✅ 自动检测变更并提交推送
• ✅ 支持 Windows / Linux / Mac

支持平台

平台	脚本
Windows	scripts/sync.ps1
Linux	scripts/sync.sh
Mac	scripts/sync.sh

安装方式

Windows

# 克隆到 OpenClaw skills 目录
cd $env:USERPROFILE\.openclaw\skills
git clone https://github.com/Hi-Jiajun/openclaw-skills-github-sync.git

Linux / Mac

# 克隆到你的 OpenClaw skills 目录
cd ~/.openclaw/skills
git clone https://github.com/Hi-Jiajun/openclaw-skills-github-sync.git

快速开始

Windows

# 首次配置（交互式向导）
powershell -ExecutionPolicy Bypass -File "scripts/setup.ps1"

# 执行同步
powershell -ExecutionPolicy Bypass -File "scripts/sync.ps1"

Linux / Mac

# 首次配置（交互式向导）
chmod +x scripts/setup.sh
./scripts/setup.sh

# 执行同步
chmod +x scripts/sync.sh
./scripts/sync.sh

安全说明

重要：排除敏感目录

本工具会自动创建 .gitignore 文件，包含以下排除项：

credentials/
*.key
*.pem
.DS_Store
*.log

使用前请确保：

1. 仓库中已包含 .gitignore 文件
2. 敏感目录（如 credentials/）已被排除
3. 推送前运行 git status 确认要推送的内容

同步前确认

脚本会：

1. 检查 .gitignore 是否存在，如不存在则自动创建
2. 显示将要推送的文件列表
3. 询问确认后才执行推送

注意事项

• 公开仓库建议设置为私有
• 同步前务必检查 .gitignore 配置
• credentials/ 目录请确保已排除