360 Secure SkillHub
360 安全技能中心

Skill Github Daily Ops

核心功能:生成含仓库开放PR、问题、最后提交日期等的Markdown健康报告;自动合并低/中危且CI通过的Dependabot安全PR,跳过高危或CI未完成的PR。典型场景:每日定时执行的GitHub组织或指定仓库运维。输入为命令行参数,需配置GitHub令牌;输出Markdown报告或自动完成合规PR合并。

zero2ai-hub
zero2ai-hub
热度 56.15
最近更新 2026-05-18 12:12:42
分类:开发依赖:代码执行 / 第三方 API / 读写文件应用场景:DevOps / 自动化脚本 / 报告撰写

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add skill-github-daily-ops
Metadata
name
skill-github-daily-ops
version
1.0.0
description
Daily GitHub repo health check + safe Dependabot auto-merge. Outputs markdown report.
metadata
{"openclaw":{"requires":{"bins":["node"]}}}

skill-github-daily-ops

Daily GitHub ops: health report per repo + safe auto-merge of Dependabot PRs (medium/low CVEs only).

Usage

# Health report for all org repos
node scripts/daily-ops.js --org Zero2Ai-hub --report

# Auto-merge safe Dependabot PRs
node scripts/daily-ops.js --org Zero2Ai-hub --merge-dependabot

# Both — specific repos
node scripts/daily-ops.js --org Zero2Ai-hub --repos "repo1,repo2" --report --merge-dependabot

Arguments

Arg Default Description
--org $GITHUB_ORG env GitHub organization
--repos all Comma-separated repo names
--report false Output markdown health report
--merge-dependabot false Auto-merge safe Dependabot PRs

Environment Variables

Var Description
GITHUB_TOKEN GitHub PAT (or reads from ~/.github_token)
GITHUB_ORG Default org

Auto-Merge Rules

  • ✅ Merges: Dependabot PRs where severity is LOW or MEDIUM and CI passes
  • ⛔ Skips: HIGH or CRITICAL CVE PRs (require human review)
  • ⏳ Skips: PRs with failing or in-progress CI

Report Output

Markdown table per repo with: open PRs, open issues, last commit date, Dependabot PR count.

Cron Example

# Daily at 08:00 Dubai time (04:00 UTC)
0 4 * * * cd /path/to/workspace && node skills/skill-github-daily-ops/scripts/daily-ops.js --org Zero2Ai-hub --report --merge-dependabot >> /var/log/github-daily-ops.log 2>&1