tag-duplicate-prs-issues

    Use gitcrawl to search duplicate OpenClaw PRs/issues, group related work in prtags, and sync duplicate state to GitHub.

    Rank#-100
    openclawgithubWorkflow391,066Last updated Oct 6, 2026, 02:56 PMgithub/openclaw/openclaw/.agents/skills/tag-duplicate-prs-issues
    Created
    11 months ago
    Last commit
    2 days ago
    Latest release
    v2026.9.85 days ago

    Security Findings

    Unpinned dependencies

    SuspiciousLineage

    2 unpinned: @openclaw/ai, @openclaw/session-url-contract

    Workflow makes outbound network call

    SuspiciousLineage

    [.github/workflows/ci.yml] curl -fsS --connect-timeout 2 --max-time 5 -X PUT -H 'X-aws-ec2-metadata-token-ttl-seconds: 60' http://169.254.169.254/l

    pull_request_target with secrets

    MaliciousLineage

    [.github/workflows/auto-response.yml] pull_request_target with secrets

    Remote code execution pipe

    MaliciousAnalyzer

    Downloads and pipes to shell: curl -fsSL https://raw.githubusercontent.com/dutifuldev/prtags/main/scripts/install-prtags.sh | bash -s -- --bin-dir "$H...

    External binary download

    SuspiciousAnalyzer

    Prerequisite downloads from non-standard source: https://raw.githubusercontent.com/dutifuldev/prtags/main/scripts/install-prtags.sh

    Versions

    1
    • Scanned Jul 19, 2026, 10:01 AMHigh