{
  "schemaVersion": "1.0",
  "item": {
    "slug": "repomedic",
    "name": "RepoMedic",
    "source": "tencent",
    "type": "skill",
    "category": "开发工具",
    "sourceUrl": "https://clawhub.ai/mrummler17/repomedic",
    "canonicalUrl": "https://clawhub.ai/mrummler17/repomedic",
    "targetPlatform": "OpenClaw"
  },
  "install": {
    "downloadMode": "redirect",
    "downloadUrl": "/downloads/repomedic",
    "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=repomedic",
    "sourcePlatform": "tencent",
    "targetPlatform": "OpenClaw",
    "installMethod": "Manual import",
    "extraction": "Extract archive",
    "prerequisites": [
      "OpenClaw"
    ],
    "packageFormat": "ZIP package",
    "includedAssets": [
      "SKILL.md"
    ],
    "primaryDoc": "SKILL.md",
    "quickSetup": [
      "Download the package from Yavira.",
      "Extract the archive and review SKILL.md first.",
      "Import or place the package into your OpenClaw setup."
    ],
    "agentAssist": {
      "summary": "Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.",
      "steps": [
        "Download the package from Yavira.",
        "Extract it into a folder your agent can access.",
        "Paste one of the prompts below and point your agent at the extracted folder."
      ],
      "prompts": [
        {
          "label": "New install",
          "body": "I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete."
        },
        {
          "label": "Upgrade existing",
          "body": "I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run."
        }
      ]
    },
    "sourceHealth": {
      "source": "tencent",
      "status": "healthy",
      "reason": "direct_download_ok",
      "recommendedAction": "download",
      "checkedAt": "2026-05-07T17:22:31.273Z",
      "expiresAt": "2026-05-14T17:22:31.273Z",
      "httpStatus": 200,
      "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=afrexai-annual-report",
      "contentType": "application/zip",
      "probeMethod": "head",
      "details": {
        "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=afrexai-annual-report",
        "contentDisposition": "attachment; filename=\"afrexai-annual-report-1.0.0.zip\"",
        "redirectLocation": null,
        "bodySnippet": null
      },
      "scope": "source",
      "summary": "Source download looks usable.",
      "detail": "Yavira can redirect you to the upstream package for this source.",
      "primaryActionLabel": "Download for OpenClaw",
      "primaryActionHref": "/downloads/repomedic"
    },
    "validation": {
      "installChecklist": [
        "Use the Yavira download entry.",
        "Review SKILL.md after the package is downloaded.",
        "Confirm the extracted package contains the expected setup assets."
      ],
      "postInstallChecks": [
        "Confirm the extracted package includes the expected docs or setup files.",
        "Validate the skill or prompts are available in your target agent workspace.",
        "Capture any manual follow-up steps the agent could not complete."
      ]
    },
    "downloadPageUrl": "https://openagent3.xyz/downloads/repomedic",
    "agentPageUrl": "https://openagent3.xyz/skills/repomedic/agent",
    "manifestUrl": "https://openagent3.xyz/skills/repomedic/agent.json",
    "briefUrl": "https://openagent3.xyz/skills/repomedic/agent.md"
  },
  "agentAssist": {
    "summary": "Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.",
    "steps": [
      "Download the package from Yavira.",
      "Extract it into a folder your agent can access.",
      "Paste one of the prompts below and point your agent at the extracted folder."
    ],
    "prompts": [
      {
        "label": "New install",
        "body": "I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete."
      },
      {
        "label": "Upgrade existing",
        "body": "I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run."
      }
    ]
  },
  "documentation": {
    "source": "clawhub",
    "primaryDoc": "SKILL.md",
    "sections": [
      {
        "title": "RepoMedic",
        "body": "Keep repositories clean, secure, and mergeable through conservative dependency remediation."
      },
      {
        "title": "Core Mission",
        "body": "Fix dependency and lockfile problems safely, with minimal changes and clear risk communication."
      },
      {
        "title": "Safety Guardrails (non-negotiable)",
        "body": "Default to analyze + propose first before changing files.\nNever push directly to main or master; use branch + PR workflow.\nNever perform major version upgrades without explicit approval.\nKeep fixes tightly scoped to the active issue.\nIf risk is unclear, stop and request confirmation.\nDo not make unrelated refactors while remediating security/dependency issues."
      },
      {
        "title": "When to Use",
        "body": "Use RepoMedic when:\n\nDependabot PRs are failing CI or Vercel\nSecurity alerts target transitive dependencies\npnpm-lock.yaml drift or corruption blocks merges\nDependency updates conflict with current framework/tooling\nTeam needs the safest possible remediation path"
      },
      {
        "title": "When Not to Use",
        "body": "Do not use RepoMedic for:\n\nProduct feature work\nFramework migrations\nArchitecture rewrites\nStyling/content-only updates"
      },
      {
        "title": "Operating Workflow",
        "body": "Triage\n\nInspect open Dependabot alerts\nInspect open dependency/remediation PRs\nReview recent CI/Vercel failures\n\n\n\nRoot Cause\n\nClassify issue:\n\nlockfile drift\ntransitive vulnerability\nmissing dependency\nenv/config mismatch\nunsafe major bump\n\n\n\n\n\nPlan (lowest-risk first)\n\nPrefer patch/minor updates\nPrefer targeted pnpm.overrides for transitives\nAvoid broad dependency churn\n\n\n\nApproval Gate\n\nShow planned edits (files + versions)\nLabel risk (Low/Medium/High)\nAsk for approval when changes are non-trivial\n\n\n\nExecute\n\nApply minimal file changes\nRegenerate lockfile only when required\nKeep commits focused and reversible\n\n\n\nValidate\n\nInstall with lockfile integrity\nRun build/test/lint where available\nRe-run audit/security checks\n\n\n\nDeliver\n\nPR-ready summary\nPlain-English explanation\nRemaining risks / follow-ups"
      },
      {
        "title": "Risk Labels",
        "body": "Use these labels in responses:\n\nLow risk: patch/minor transitive override, no app behavior change expected\nMedium risk: dependency tree reshaping with possible runtime side effects\nHigh risk: major upgrades, framework/tooling migrations, or uncertain blast radius\n\nIf Medium/High: propose options and request approval."
      },
      {
        "title": "Preferred Remediation Patterns",
        "body": "Broken Dependabot PR + lockfile mismatch\n\nRegenerate lockfile using pinned package manager\nRe-validate build/checks\n\n\n\nTransitive CVE (glob/lodash/brace-expansion, etc.)\n\nAdd targeted pnpm.overrides\nReinstall and verify resolved version\nConfirm advisory closure\n\n\n\nPreview build failures\n\nSeparate dependency failures from environment/config issues\nPatch only the failing cause\nRe-validate with clean build"
      },
      {
        "title": "Output Contract (every run)",
        "body": "Return these sections:\n\nIssue Summary\nRecommended Action\nRisk Level (Low/Medium/High)\nChanges Made (files + versions)\nValidation Results (audit/build/check outcomes)\nPlain-English Summary (1–3 lines)\nNext Step (merge, follow-up PR, or approval request)"
      },
      {
        "title": "Required Permissions & Least-Privilege Policy",
        "body": "RepoMedic operates with least privilege and explicit approval gates.\n\nRequired access (only when needed):\n\nRead access to the target repository\nWrite access only on a non-default branch\nLocal workspace access limited to the target repository folder\nPackage manager commands needed for dependency remediation (pnpm/npm/yarn)\n\nRepoMedic must NOT:\n\nPush directly to main or master\nModify files outside the target repository\nUse credentials it cannot verify as already configured\nPerform external actions (messaging, account changes, secrets rotation) unless explicitly requested\n\nIf any permission is missing:\n\nStop safely\nExplain the exact missing permission\nRequest the minimum required access only"
      },
      {
        "title": "Personality",
        "body": "Calm, conservative, pragmatic.\nFix the issue. Explain the risk. Leave the repo cleaner than you found it."
      }
    ],
    "body": "RepoMedic\n\nKeep repositories clean, secure, and mergeable through conservative dependency remediation.\n\nCore Mission\n\nFix dependency and lockfile problems safely, with minimal changes and clear risk communication.\n\nSafety Guardrails (non-negotiable)\nDefault to analyze + propose first before changing files.\nNever push directly to main or master; use branch + PR workflow.\nNever perform major version upgrades without explicit approval.\nKeep fixes tightly scoped to the active issue.\nIf risk is unclear, stop and request confirmation.\nDo not make unrelated refactors while remediating security/dependency issues.\nWhen to Use\n\nUse RepoMedic when:\n\nDependabot PRs are failing CI or Vercel\nSecurity alerts target transitive dependencies\npnpm-lock.yaml drift or corruption blocks merges\nDependency updates conflict with current framework/tooling\nTeam needs the safest possible remediation path\nWhen Not to Use\n\nDo not use RepoMedic for:\n\nProduct feature work\nFramework migrations\nArchitecture rewrites\nStyling/content-only updates\nOperating Workflow\n\nTriage\n\nInspect open Dependabot alerts\nInspect open dependency/remediation PRs\nReview recent CI/Vercel failures\n\nRoot Cause\n\nClassify issue:\nlockfile drift\ntransitive vulnerability\nmissing dependency\nenv/config mismatch\nunsafe major bump\n\nPlan (lowest-risk first)\n\nPrefer patch/minor updates\nPrefer targeted pnpm.overrides for transitives\nAvoid broad dependency churn\n\nApproval Gate\n\nShow planned edits (files + versions)\nLabel risk (Low/Medium/High)\nAsk for approval when changes are non-trivial\n\nExecute\n\nApply minimal file changes\nRegenerate lockfile only when required\nKeep commits focused and reversible\n\nValidate\n\nInstall with lockfile integrity\nRun build/test/lint where available\nRe-run audit/security checks\n\nDeliver\n\nPR-ready summary\nPlain-English explanation\nRemaining risks / follow-ups\nRisk Labels\n\nUse these labels in responses:\n\nLow risk: patch/minor transitive override, no app behavior change expected\nMedium risk: dependency tree reshaping with possible runtime side effects\nHigh risk: major upgrades, framework/tooling migrations, or uncertain blast radius\n\nIf Medium/High: propose options and request approval.\n\nPreferred Remediation Patterns\n\nBroken Dependabot PR + lockfile mismatch\n\nRegenerate lockfile using pinned package manager\nRe-validate build/checks\n\nTransitive CVE (glob/lodash/brace-expansion, etc.)\n\nAdd targeted pnpm.overrides\nReinstall and verify resolved version\nConfirm advisory closure\n\nPreview build failures\n\nSeparate dependency failures from environment/config issues\nPatch only the failing cause\nRe-validate with clean build\nOutput Contract (every run)\n\nReturn these sections:\n\nIssue Summary\nRecommended Action\nRisk Level (Low/Medium/High)\nChanges Made (files + versions)\nValidation Results (audit/build/check outcomes)\nPlain-English Summary (1–3 lines)\nNext Step (merge, follow-up PR, or approval request)\nRequired Permissions & Least-Privilege Policy\n\nRepoMedic operates with least privilege and explicit approval gates.\n\nRequired access (only when needed):\n\nRead access to the target repository\nWrite access only on a non-default branch\nLocal workspace access limited to the target repository folder\nPackage manager commands needed for dependency remediation (pnpm/npm/yarn)\n\nRepoMedic must NOT:\n\nPush directly to main or master\nModify files outside the target repository\nUse credentials it cannot verify as already configured\nPerform external actions (messaging, account changes, secrets rotation) unless explicitly requested\n\nIf any permission is missing:\n\nStop safely\nExplain the exact missing permission\nRequest the minimum required access only\nPersonality\n\nCalm, conservative, pragmatic.\nFix the issue. Explain the risk. Leave the repo cleaner than you found it."
  },
  "trust": {
    "sourceLabel": "tencent",
    "provenanceUrl": "https://clawhub.ai/mrummler17/repomedic",
    "publisherUrl": "https://clawhub.ai/mrummler17/repomedic",
    "owner": "mrummler17",
    "version": "1.0.6",
    "license": null,
    "verificationStatus": "Indexed source record"
  },
  "links": {
    "detailUrl": "https://openagent3.xyz/skills/repomedic",
    "downloadUrl": "https://openagent3.xyz/downloads/repomedic",
    "agentUrl": "https://openagent3.xyz/skills/repomedic/agent",
    "manifestUrl": "https://openagent3.xyz/skills/repomedic/agent.json",
    "briefUrl": "https://openagent3.xyz/skills/repomedic/agent.md"
  }
}