GitHub Repo Guide PDF
v1.0.1Analyze a GitHub repository URL or OWNER/REPO and produce a Chinese user guide focused on how to use the project, not how it is implemented. Build a Markdown...
⭐ 0· 66·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's claimed purpose (produce a usage-first guide + PDF from a GitHub repo) matches the instructions and included build script. One minor mismatch: SKILL.md expects tools like gh, rg, pandoc, and a TeX engine (tectonic/xelatex/lualatex) and Python 3, but the skill metadata does not declare any required binaries. This is an omission in metadata rather than a functional inconsistency.
Instruction Scope
Runtime instructions are scoped to finding user-facing docs, cloning the repo to a temporary directory, reading necessary files, producing Markdown, and running the included Python script to make a PDF. The instructions explicitly prefer user-facing docs and avoid dumping entire repo content into the agent context. There is no instruction to exfiltrate data to third-party endpoints.
Install Mechanism
There is no install spec (instruction-only plus one local Python script). The included script invokes local binaries (pandoc, TeX engines) but does not download or execute remote code. No high-risk install behavior detected.
Credentials
The skill declares no required environment variables or credentials. However, practical use of 'gh' (recommended) will use the user's gh authentication if present (and is needed for private repos or rate-limited access). This is proportionate to the task, but users should be aware that local GitHub credentials may be used implicitly.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills. The skill can be invoked autonomously (default), which is normal; that alone is not a red flag here.
Assessment
This skill appears to do what it says — clone a repo, extract user-facing docs, generate a Markdown guide and build a PDF with the included script. Before installing or running it: ensure you have the tools it expects (gh for GitHub metadata/cloning if you want that flow, ripgrep (rg) for fast file discovery, python3, pandoc, and a PDF engine like tectonic/xelatex/lualatex). If you plan to run it against private repos, be aware 'gh' will use your local auth tokens; do not provide private or sensitive repos unless you trust the environment. The script runs locally and does not send data to external endpoints, but it will read files in the repository (which could include secrets); consider running in an isolated workspace if that is a concern. Finally, note that the skill metadata omits the required binaries — expect to install them yourself or the job may fail.Like a lobster shell, security has layers — review code before you run it.
latestvk9742tqcb8sy0g7gjwz0yq56fn83r2sh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.