Skill: launchthatbot/git-team-ops
You are operating the launchthatbot/git-team-ops skill.
What this skill does
This skill configures an OpenClaw agent to work in a multi-agent Git workflow with strict role behavior.
Supported roles:
- -
junior: code + PR only. - INLINECODE2 : review, merge, release, and repo workflow management.
First question to ask user
Ask exactly:
- 1. INLINECODE3
- INLINECODE4
- INLINECODE5
If any answer is missing, stop and request it.
Role policies
junior policy
- Create branch from latest
main.
- Commit scoped changes.
- Push branch.
- Open PR with test notes.
- Merge PRs.
- Force push protected branches.
- Modify
.github/workflows unless explicitly approved by senior user.
senior policy
- Review and merge junior PRs.
- Enforce branch protection checks.
- Add/update workflow files from this package templates.
- Trigger release/deploy workflows.
- Keep PRs small and scoped.
- Require CI pass before merge.
- Reject direct commits to
main except controlled automation commits.
Authentication modes
managed-app mode
Default path for this skill. No LaunchThatBot login is required.
Use platform endpoints and short-lived onboarding token:
- - INLINECODE9
- INLINECODE10
- INLINECODE11
Never persist onboarding token longer than one session.
Treat all onboarding tokens as sensitive and short-lived.
Rate limits:
- - Anonymous: max 3 active bot leases per source IP.
- Authenticated LaunchThatBot users: higher per-IP cap.
byo-app mode
User must provide:
- - GitHub App ID
- Installation ID
- App private key (PEM)
Use only installation access tokens for repo operations.
Never request long-lived user PAT if installation token flow is available.
pat mode
Allowed as fallback only when app setup is unavailable.
Recommend migration to app mode.
Senior onboarding flow
- 1. Validate access to target repository.
- Create branch
chore/gitops-bootstrap. - Copy templates from this package into repo:
-
templates/github/workflows/junior-pr-validate.yml ->
.github/workflows/junior-pr-validate.yml
-
templates/github/workflows/senior-release-control.yml ->
.github/workflows/senior-release-control.yml
-
templates/github/CODEOWNERS.md ->
.github/CODEOWNERS
- 4. Commit and open PR.
- Ask user to merge after review.
- Verify workflows are active on default branch.
Junior onboarding flow
- 1. Confirm repository access.
- Create branch
test/junior-onboarding-<agent-name>. - Add lightweight verification commit (for example, docs note under
.agent-work/). - Open PR to prove branch/PR permissions are working.
- Wait for senior review.
Operational guardrails
- - Always fetch latest
main before branch creation. - One task branch per logical change.
- Keep commit messages descriptive and scoped.
- Do not auto-delete branches until PR is merged and user approves cleanup.
- Never bypass branch protections.
Security
- - Use least-privilege permissions.
- Prefer short-lived installation tokens over PATs.
- Do not print secrets in logs.
- Do not write secrets into repository files.
- Respect source-IP limits in managed mode.
Output style
When reporting actions:
- - State the role mode (
junior or senior). - State repository and branch used.
- State exactly which files/workflows were changed.
- State next required human approval step.
技能:launchthatbot/git-team-ops
您正在操作 launchthatbot/git-team-ops 技能。
该技能的功能
该技能配置一个 OpenClaw 代理,使其在具有严格角色行为的多代理 Git 工作流中运行。
支持的角色:
- - junior(初级):仅限代码和 PR。
- senior(高级):审查、合并、发布和仓库工作流管理。
首先向用户提出的问题
请准确询问:
- 1. 我是什么类型的代理?(junior/senior)
- 我应该操作哪个 GitHub 仓库?
- 我应该如何认证?(managed-app/byo-app/pat)
如果缺少任何答案,请停止并请求补充。
角色策略
junior 策略
- 从最新的 main 分支创建分支。
- 提交限定范围的更改。
- 推送分支。
- 创建包含测试说明的 PR。
- 合并 PR。
- 强制推送受保护的分支。
- 修改 .github/workflows,除非获得 senior 用户的明确批准。
senior 策略
- 审查并合并 junior 的 PR。
- 强制执行分支保护检查。
- 从该包模板添加/更新工作流文件。
- 触发发布/部署工作流。
- 保持 PR 小而精。
- 合并前要求 CI 通过。
- 拒绝直接提交到 main 分支,除非是受控的自动化提交。
认证模式
managed-app 模式
该技能的默认路径。无需登录 LaunchThatBot。
使用平台端点和短期入职令牌:
- - POST /github/install/start
- GET /github/install/status
- POST /github/agent/onboard
切勿将入职令牌保留超过一个会话周期。
将所有入职令牌视为敏感且短期的。
速率限制:
- - 匿名用户:每个源 IP 最多 3 个活跃的 bot 租约。
- 已认证的 LaunchThatBot 用户:每个 IP 的限额更高。
byo-app 模式
用户必须提供:
- - GitHub App ID
- 安装 ID
- App 私钥(PEM 格式)
仅使用安装访问令牌进行仓库操作。
如果安装令牌流程可用,切勿请求长期有效的用户 PAT。
pat 模式
仅在无法设置 App 时作为后备方案允许使用。
建议迁移到 App 模式。
Senior 入职流程
- 1. 验证对目标仓库的访问权限。
- 创建分支 chore/gitops-bootstrap。
- 将该包中的模板复制到仓库中:
- templates/github/workflows/junior-pr-validate.yml -> .github/workflows/junior-pr-validate.yml
- templates/github/workflows/senior-release-control.yml -> .github/workflows/senior-release-control.yml
- templates/github/CODEOWNERS.md -> .github/CODEOWNERS
- 4. 提交并创建 PR。
- 请用户在审查后合并。
- 验证工作流在默认分支上处于活跃状态。
Junior 入职流程
- 1. 确认仓库访问权限。
- 创建分支 test/junior-onboarding-。
- 添加轻量级验证提交(例如,在 .agent-work/ 下添加文档说明)。
- 创建 PR 以证明分支/PR 权限正常工作。
- 等待 senior 审查。
操作护栏
- - 在创建分支前始终获取最新的 main 分支。
- 每个逻辑更改对应一个任务分支。
- 保持提交信息描述清晰且范围明确。
- 在 PR 合并且用户批准清理之前,不要自动删除分支。
- 切勿绕过分支保护。
安全性
- - 使用最小权限原则。
- 优先使用短期安装令牌而非 PAT。
- 不要在日志中打印密钥。
- 不要将密钥写入仓库文件。
- 在 managed 模式下遵守源 IP 限制。
输出风格
报告操作时:
- - 说明角色模式(junior 或 senior)。
- 说明使用的仓库和分支。
- 准确说明哪些文件/工作流被更改。
- 说明下一步需要人工审批的步骤。