RepoMedic is an AI agent skill designed to safely triage and remediate GitHub dependency issues, security vulnerabilities, and lockfile inconsistencies with strict safety guardrails.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install repomedic
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install repomedic using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is RepoMedic?
RepoMedic acts as a specialized maintainer for your codebase, focusing specifically on dependency hygiene and security. It provides a conservative approach to fixing broken Dependabot PRs, resolving transitive vulnerabilities, and correcting lockfile drift without introducing breaking changes. By prioritizing minimal edits and clear risk communication, this addition to the Openclaw Skills collection ensures that your repository remains secure and buildable.
The skill operates with an analyze-first methodology, ensuring that every action is justified and low-risk. It integrates seamlessly into modern development workflows, providing plain-English explanations for every change made. Whether you are dealing with a complex pnpm-lock.yaml conflict or a critical security advisory in a nested package like lodash or glob, RepoMedic provides the precision needed to keep your projects clean and mergeable.
RepoMedic Use Cases
- When Dependabot PRs fail CI or Vercel deployment checks due to environment mismatches.
- Security alerts targeting transitive dependencies that require targeted package overrides.
- Resolving pnpm-lock.yaml drift or corruption that prevents successful branch merges.
- Managing dependency updates that conflict with specific framework or tooling versions.
- Situations requiring a highly conservative, risk-labeled remediation path for production code.
How RepoMedic Works
- Triage the environment by inspecting open Dependabot alerts, existing PRs, and recent CI failure logs.
- Conduct a root cause analysis to classify the issue as lockfile drift, vulnerability, or configuration mismatch.
- Develop a low-risk remediation plan favoring patch updates or specific package overrides over major version jumps.
- Present an approval gate showing planned edits and categorized risk labels such as Low, Medium, or High.
- Execute minimal file changes and regenerate lockfiles only when absolutely necessary to satisfy integrity checks.
- Validate the fix by running local builds, linting, and security audits to ensure no regressions were introduced.
- Deliver a PR-ready summary with plain-English explanations and clear next steps for the maintainer.
RepoMedic Setup
To integrate RepoMedic into your development environment, ensure your agent has access to the target repository and the necessary package managers.
# Ensure your preferred package manager is available locally
npm install -g pnpm
# Configure the agent to use the RepoMedic skill within your workspace
# Ensure credentials allow for branch creation and PR submission
RepoMedic follows a least-privilege policy, meaning it will only request write access on non-default branches and will stop if required permissions are missing.
RepoMedic Data Schema & Taxonomy
| Data Element | Type | Description |
|---|---|---|
| Risk Labels | String | Categorization of changes as Low (patch), Medium (tree reshaping), or High (major upgrade). |
| Change Logs | Markdown | Detailed list of modified files and specific package version transitions. |
| Validation Results | String | Aggregated output from audit, build, and lint checks. |
| Remediation PRs | Git Branch | Isolated branches created specifically for dependency fixes to avoid main branch pollution. |
| Overrides | JSON/YAML | Specific entries added to pnpm.overrides or package.json resolutions to fix transitives. |
RepoMedic Advanced Features
- Multi-package manager support including npm, yarn, and pnpm for diverse project environments.
- Targeted transitive vulnerability resolution using pnpm.overrides to minimize dependency churn.
- Automated CI and Vercel failure diagnosis with localized patching capabilities.
- Strict least-privilege policy that prevents direct pushes to protected branches like main or master.
- Comprehensive risk-labeled proposal system designed for high-stakes production environments.
- Seamless compatibility with other Openclaw Skills to enhance overall repository health and developer productivity.
SKILL.md
Loading
Related Openclaw Skills
IDA – Instructional Design Agent
A strategic learning engine that transforms raw discovery data into structured instructional blueprints and performance recommendations.
Web Content Fetcher
A specialized tool that bypasses web scrapers blocks by using alternative proxy services to fetch webpage content in Markdown format.
Onnex YouTube
A security-reviewed tool for fetching YouTube transcripts, 4K videos, and channel metadata without API quotas.
Clawchemy
Clawchemy is a decentralized element discovery game where AI agents use LLMs to create new elements that are automatically minted as tokens on the Base chain.
Proxmox VE Full Management
A comprehensive automation skill for managing Proxmox VE infrastructure, including virtual machines and Linux containers, via its REST API.
Uptime Kuma Monitoring
A powerful CLI-driven skill to manage Uptime Kuma monitoring instances, allowing for automated status checks and monitor configuration.
METADATA
Featured*
