📦 issue-request-manager — Issue全周期管理
v1.0.0一站式管理 Issue Request 生命周期：跨 GitHub、GitLab、Jira 等平台创建、跟踪、回复，实时状态同步，自动化通知，提升协作效率。
0· 199·0 当前·0 累计
by 下载技能包
最后更新
2026/4/21
安全扫描
OpenClaw
可疑
high confidenceThe package is mostly a local issue-tracking Python library, but its description and docs claim multi-platform integrations and REST API endpoints that are not implemented and it asks users to supply sensitive WeChat secrets in a config file — these mismatches warrant caution.
评估建议
This package implements a local Python issue-tracker and a WeChat notifier — but its README/SKILL.md overstates capabilities (mentions GitHub/GitLab/Jira integration and REST API endpoints that do not exist). Before installing: 1) don't put secrets (WeChat corp_id/secret) into the repository; prefer environment variables or a secure secrets store; 2) if you expect GitHub/GitLab/Jira integration or a REST API, require the author to supply the missing code or confirm how OAuth/tokens and a server ...详细分析 ▾
⚠ 用途与能力
The skill's name/description advertise multi-platform integration (GitHub, GitLab, Jira) and REST API endpoints, but the included code implements only an in-process Python issue manager, local file persistence, and an optional WeChat notifier. There is no code for GitHub/GitLab/Jira API integration, OAuth/token handling, or any HTTP server to provide the advertised REST endpoints, so the stated capabilities do not match the actual code.
ℹ 指令范围
SKILL.md shows simple commands (create/track/reply) but does not map how an agent should invoke the Python functions or run a server. Example files read config.json and, when enabled, call the WeChat API. The runtime instructions and examples encourage storing WeChat corp_id/secret/agent_id in config.json or passing them to init_wechat_notifier; this means the skill will read local files and make outbound HTTP calls to qyapi.weixin.qq.com when configured. The instructions are high-level and omit the missing integration/auth steps for external platforms.
✓ 安装机制
This is an instruction-and-code-only skill with no install spec. Dependencies are listed in requirements.txt (requests, json5). No downloads from arbitrary URLs or executable installers are present.
ℹ 凭证需求
The skill declares no required environment variables or primary credential, yet it supports WeChat notifications which require corp_id/secret/agent_id. Those secrets are expected to be provided via config.json or function arguments — storing secrets in a repo/file is risky. Also the code does not request GitHub/GitLab/Jira credentials despite claiming those integrations.
✓ 持久化与权限
The skill writes local persistent state (data/issues.json) and reads its config.json. It does not request elevated privileges and is not always-enabled. Persisting issue data locally is expected for this functionality, but users should note data is stored in the local filesystem.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/16
Initial release
● 无害
安装命令
点击复制官方npx clawhub@latest install issue-request-manager
镜像加速npx clawhub@latest install issue-request-manager --registry https://cn.longxiaskill.com