ClawKit Logo
ClawKitReliability Toolkit
Back to Registry
Official Verified developer tools Safety 4/5

github-pat

Interact with GitHub using Personal Access Tokens. Secure, user-controlled access - no OAuth, no full account access. Clone, push, branch, PR, issues. Use when user wants to work with GitHub repos.

skill-install — Terminal

Install via CLI (Recommended)

clawhub install openclaw/skills/skills/dannyshmueli/github-token
Or

What This Skill Does

The github-pat skill is a purpose-built integration for OpenClaw that enables secure, authenticated interaction with the GitHub platform. Unlike traditional OAuth integrations that often request broad, blanket permissions for your entire account, this skill leverages GitHub Personal Access Tokens (PATs). This approach empowers you to maintain granular control over exactly what the agent can and cannot access by defining specific scopes (such as public_repo or repo) when you generate the token on GitHub. The skill facilitates a complete Git-based workflow directly from your agent, including cloning repositories, managing branches, committing and pushing code, creating issues, and opening pull requests.

Installation

To integrate this skill into your OpenClaw environment, execute the following command in your terminal: clawhub install openclaw/skills/skills/dannyshmueli/github-token

Once installed, you must provide your GitHub PAT. It is recommended to store your token in the TOOLS.md file under a ### GitHub header. Ensure this file is kept secure and excluded from any public version control systems. Alternatively, you can pass the token directly as an argument using the --token flag for one-time operations.

Use Cases

This skill is ideal for developers and technical operators who want to automate repository management without compromising security. Common use cases include:

  • Rapidly scaffolding projects by cloning remote repositories.
  • Automating issue tracking by having the agent log bugs or feature requests directly to GitHub.
  • Streamlining code contributions by using the agent to create branches, push code, and open pull requests against mainlines.
  • Auditing repository metadata or configuration settings across multiple organization projects.

Example Prompts

  1. "Clone the repository at openclaw/core-engine and create a new branch named 'feature-auth-refactor' for my work."
  2. "Review the current open issues in the current repo and create a new issue titled 'Documentation update' with a detailed body about the missing API guides."
  3. "Commit my recent changes with the message 'Implement OAuth fallback' and open a pull request into the main branch with the title 'Authentication fixes'."

Tips & Limitations

To maximize security, always use the principle of least privilege. When creating a PAT at github.com/settings/tokens, only select the specific scopes required for your current task. Avoid using 'repo' scope if 'public_repo' is sufficient. Always remember that the agent acts as an extension of your GitHub user; any action taken by the agent is logged by GitHub under your identity. If your token is compromised, revoke it immediately via your GitHub security settings. Note that this skill requires git to be installed on the host machine to handle cloning and push operations effectively.

Metadata

Stars3376
Views0
Updated2026-03-24
View Author Profile
AI Skill Finder

Not sure this is the right skill?

Describe what you want to build — we'll match you to the best skill from 16,000+ options.

Find the right skill
Add to Configuration

Paste this into your clawhub.json to enable this plugin.

{
  "plugins": {
    "official-dannyshmueli-github-token": {
      "enabled": true,
      "auto_update": true
    }
  }
}

Tags(AI)

#github#git#automation#developer#version-control
Safety Score: 4/5

Flags: network-access, file-write, file-read, external-api, code-execution

Related Skills