Jules API
v1.0.0Create and manage Google Jules AI coding sessions to automate tasks like code writing, bug fixing, testing, and PR creation on GitHub repos using the Jules API.
⭐ 0· 734·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description, declared env var (JULES_API_KEY), and curl usage align with a Jules REST API client. However, the included scripts/jules.sh relies on jq for building and parsing JSON (unconditionally in places) while the skill metadata only lists curl as a required binary. That mismatch means the skill as packaged may fail at runtime unless jq is present, and the metadata underreports the actual runtime footprint.
Instruction Scope
SKILL.md instructs only against Jules endpoints (sessions, sources, activities) and sending the API key via the x-goog-api-key header. There is no instruction to read unrelated files, other environment variables, or exfiltrate data to third parties. Note: the skill supports automation modes (AUTO_CREATE_PR) that will cause Jules to create PRs on connected GitHub repos — this is expected but impactful behavior.
Install Mechanism
No install spec (instruction-only) which reduces supply-chain risk. However, a helper script is included in the bundle (scripts/jules.sh) that will be executed if the user runs it; it writes/executes nothing on install but will run curl and jq at runtime. No external downloads or archive extraction are present.
Credentials
Only JULES_API_KEY is required and is appropriate for the documented API interactions. Users should be aware that the API key grants Jules access to repositories connected to the Jules account (including ability to create PRs when automationMode is used), so key scope and trust in the Jules integration matter.
Persistence & Privilege
Skill does not request always:true and makes no persistent system changes in its files. It does not modify other skills or system-wide agent settings. Autonomous invocation is allowed (platform default) but is not combined with other high-privilege requests.
What to consider before installing
This skill appears to be a genuine Jules REST API helper, but review these points before installing or running it:
- The included script (scripts/jules.sh) uses jq to construct and parse JSON, but the skill metadata only lists curl as required. If you run the script without jq installed it will likely fail (set -euo will cause early exit). Install jq or update the script/metadata before use.
- The skill requires your JULES_API_KEY. That key gives Jules access to repositories that are connected to your Jules account and can be used to auto-create pull requests (automationMode AUTO_CREATE_PR). Only use with an API key you trust and consider limiting scope or using an account with minimal privileges.
- There are no hidden network endpoints or download steps in the package, but the helper script will perform network calls to jules.googleapis.com — inspect the script and test in a controlled environment first.
- If you intend to allow autonomous agent actions, be cautious about auto-approve/auto-PR flows; prefer requirePlanApproval unless you trust the automation.
If you want to proceed: either install jq on the host or edit the script to avoid jq (or update skill metadata to declare jq in required binaries). If you are unsure about giving Jules account access to important repos, create a low-privilege Jules/GitHub integration for testing and rotate the API key after use.Like a lobster shell, security has layers — review code before you run it.
latestvk97fd5vt9nkzyvqmc8hxstts9h814nsq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🤖 Clawdis
Binscurl
EnvJULES_API_KEY
Primary envJULES_API_KEY