Unified

管理和分析本地GitHub仓库，支持仓库克隆、信息查询、结构分析及远程仓库搜索。

Security Scan

The skill's code and instructions are consistent with a GitHub-local-repo management tool: it clones repos, reads README files, searches GitHub, and updates a local CLAUDE.md — nothing in the package appears to request unrelated secrets or reach out to unexpected endpoints.

Purpose & Capability

Name/description match the code and SKILL.md: the code clones repositories, analyzes README files, lists local repos and searches GitHub. Minor inconsistencies: the README mentions /home/node/clawd/github-kb/ while the code writes to /home/node/clawd/skills/unified/github-kb; SKILL metadata lists no required binaries even though README/SKILL.md and code expect 'git' and optionally 'gh' or 'curl'. These are implementation/documentation mismatches but not evidence of misaligned capability.

Instruction Scope

SKILL.md instructs use of git and gh and describes creating/updating CLAUDE.md and cloning into a local directory — the runtime code follows those instructions. The skill auto-triggers on Git/GitHub keywords (normal for this type). It does perform network calls to api.github.com and runs git/gh/curl via subprocess, but only against user-supplied repo names or search queries; it does not read unrelated system files or environment variables.

Install Mechanism

No install spec (instruction-only + included Python files). All code is bundled in the skill; there are no external downloads or extract steps. This lowers install risk. The package does rely on external binaries (git, gh, curl) being present on the host.

Credentials

The skill declares no required environment variables or credentials and the code uses unauthenticated GitHub API calls / gh when available. This is proportional. Note: if the host has a configured 'gh' with auth tokens, the CLI would use those tokens implicitly — the skill itself does not request secrets.

Persistence & Privilege

always:false and no system-wide config changes. The skill writes to and manages files inside its own github-kb directory and updates CLAUDE.md there, which is expected. It does not modify other skills or global agent settings.

Assessment

This skill appears to do what it says: clone and analyze GitHub repos and maintain a local summary file. Before installing, consider the following: - The skill will create and write files under /home/node/clawd/skills/unified/github-kb (README mentions a slightly different path); confirm that directory is acceptable and writable. - It runs git/gh/curl via subprocess to clone and query repositories. Ensure you trust the repositories you ask it to clone — cloned code can contain malicious scripts if you run them locally. - The skill does not request credentials, but if the host has a configured GitHub CLI (gh) with auth, those credentials could be used implicitly by gh; restrict gh credentials or run in a sandbox if that is a concern. - Minor issues in the package: README vs code path mismatch and a likely missing import (urllib) in github_kb.py which could break some search paths; review the code and test in a controlled environment. - If you require higher assurance: verify the author/owner, request a homepage or source repo, or run the skill in an isolated container before granting it filesystem access.

GitHub Knowledge Base Skill

概述

这个技能用于管理本地GitHub仓库知识库，提供GitHub仓库的本地管理和分析功能。

配置

• 本地GitHub目录: @/home/node/clawd/skills/unified/github-kb/CLAUDE.md
• GitHub CLI: 使用 gh 命令进行GitHub操作
• Git命令: 用于克隆和管理本地仓库

功能

1. 仓库管理

• 自动检测本地GitHub目录
• 记录每个仓库的一句话摘要
• 支持克隆新仓库到本地目录

2. 智能搜索

• 当用户提到 "github"、"repo"、"仓库" 时自动触发
• 优先在本地目录搜索用户提到的仓库
• 使用GitHub CLI搜索远程仓库信息

3. 内容分析

• 分析本地仓库结构和内容
• 提供仓库相关的技术信息
• 查看issues、PRs等信息

4. 自动更新

• 仓库克隆后自动更新CLAUDE.md
• 记录仓库摘要和关键信息

使用方法

基本操作

• 下载 [仓库名] - 克隆指定仓库到本地目录
• [仓库名] 的信息 - 查询仓库详细信息
• 搜索 [关键词] - 在GitHub上搜索相关仓库

示例

• "下载 openai/gpt-3"
• "react 仓库的issues"
• "搜索 python machine learning"

注意事项

• Token使用限制：300万tokens，超过会提醒用户
• 需要GitHub CLI已安装并配置
• 本地目录需要存在且可写

文件结构

/home/node/clawd/skills/unified/github-kb/
├── CLAUDE.md          # 仓库摘要记录
├── [仓库名1]/        # 克隆的仓库1
├── [仓库名2]/        # 克隆的仓库2
└── ...