github-installer-agent一键从 GitHub 克隆项目，识别依赖文件并自动安装 Python 库，提供项目结构和运行方式初步分析建议。
Install via ClawdBot CLI:
clawdbot install tugocoffe/github-installer-agentGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Potentially destructive shell commands in tool definitions
rm -rf /Calls external URL not in known-safe list
https://github\.com/[a-zA-Z0-9_.-]+/[a-zA-Z0-9_.-]+(/.*Uses known external API (expected, informational)
api.github.comAI Analysis
The skill performs legitimate GitHub API calls for repository metadata and clones public repositories, which aligns with its stated purpose. The primary risk is the potential for cloning malicious code, but the skill includes safety checks, uses shallow cloning, and explicitly avoids automatic dependency installation, mitigating this risk. No evidence of credential harvesting, data exfiltration, or hidden malicious instructions was found.
Generated May 9, 2026
Evaluate an open-source library from GitHub by safely cloning it and generating a security and structure report. This helps teams quickly vet dependencies before integration.
Securely fetch and inspect infrastructure-as-code projects from GitHub, analyze requirements, and generate safe setup instructions for internal DevOps teams.
Professors or researchers can securely clone student projects from GitHub, validate safety, and provide structured feedback without executing untrusted code.
Finance or healthcare teams can safely clone third-party GitHub projects, verify dependencies against security policies, and receive manual installation guidance.
Offer project security scans for GitHub repos, providing detailed reports and safe installation guides to enterprises on a per-scan or subscription basis.
License the skill as a plugin for IDEs or CI/CD pipelines, enabling teams to safely evaluate dependencies before deployment.
Build a SaaS platform that uses the skill to continuously monitor and assess open-source projects for organizations, offering alerts and compliance reports.
💬 Integration Tip
Integrate this skill as a pre-commit hook or CI step to automatically validate any cloned repository before review. Combine with a secrets scanner for enhanced security.
Scored Jun 29, 2026
Audited Apr 17, 2026 · audit v1.0
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
通过网页抓取获取 GitHub 按日/周/月增长的热门仓库。当用户询问 GitHub 趋势、热门项目、本周热点或「什么在 GitHub 上 trending」时使用。可输出列表或 JSON，无需 API Key。
GitHub 操作技能 - 创建仓库、推送代码、管理 Release。全自动，无需用户干预。
Query builder reputation data via Talent Protocol API. Get Builder Rank, verify humans, resolve identities (Twitter/Farcaster/GitHub/wallet), search by location/country, get credentials, and enrich with GitHub data.
Review GitHub repositories, group issues and pull requests by urgency, and take safe triage actions (add labels, comment, propose closure) after confirmation...
Semantic git history search and code archaeology. Use when asked why code exists, who owns a file, what introduced a regression, what changed in a commit ran...