Fähigkeiten gh-axi
📦

gh-axi

Inhaltsrevision r1 Sicher ⚙️ Externe Befehle

Manage GitHub Workflows with gh-axi

GitHub work often requires many commands across issues, pull requests, CI, releases, and projects. This skill directs agents to gh-axi for current commands and task execution.

Unterstützt: Claude Codex Code(CC)
Maintain this Skill? Claim it 🥉 77 Bronze

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage
Review the Skillstore skill "gh-axi" from https://skillstore.io/skills/kunchenguid-gh-axi.md and its manifest at https://skillstore.io/api/skills/kunchenguid-gh-axi/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/kunchenguid-gh-axi.md Signiertes manifest GET /api/skills/kunchenguid-gh-axi/manifest Signiertes lockfile GET /api/skills/kunchenguid-gh-axi/lockfile

Testen

„gh-axi“ wird verwendet. Summarize the current repository without making changes.

Erwartetes Ergebnis:

Repository status: two open pull requests, one failing CI check, and three active issues. Pull request 42 is blocked by tests.

„gh-axi“ wird verwendet. Review pull request 42 and identify merge blockers.

Erwartetes Ergebnis:

  • Review status: one approval and one requested change.
  • Checks: unit tests failed; lint and build passed.
  • Merge blocker: resolve the requested change and rerun unit tests.

„gh-axi“ wird verwendet. Prepare a release readiness summary.

Erwartetes Ergebnis:

Release readiness: the target milestone is complete, but one workflow remains unsuccessful. No release action was taken.

Sicherheitsaudit

Sicher
v1 • 27.9.2026 Versionsbericht öffnen

Two Markdown references are false positives because backticks only format CLI names. Three examples invoke an unpinned npm package through npx -y, creating remote code execution and supply-chain exposure.

1
Gescannte Dateien
25
Analysierte Zeilen
3
Prüfelemente
0
Falschmeldungen ignoriert
Elemente der Fähigkeitsprüfung (3)

Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.

Mittel
SKILL.md:22
Ruby/shell backtick execution
- `npx -y gh-axi` for a dashboard of the current repo
The instruction runs npx with automatic confirmation and no package version. This can download and execute changing third-party package code.
Mittel
SKILL.md:23
Ruby/shell backtick execution
- `npx -y gh-axi --help` for global flags and the command index
The help command still invokes an unpinned package through npx -y. Package installation scripts and CLI startup code can execute locally.
Mittel
SKILL.md:24
Ruby/shell backtick execution
- `npx -y gh-axi <command> --help` for per-command usage
This per-command help example executes the same unpinned npm package without confirmation. The placeholder does not remove the package execution risk.

Risikofaktoren

⚙️ Externe Befehle (5)
SKILL.md:3 SKILL.md:14 SKILL.md:22 SKILL.md:23 SKILL.md:24
Geprüft von: codex
Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen
Sicherheitsbewertung

Berichtslink kopieren

https://skillstore.io/skills/kunchenguid-gh-axi/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/kunchenguid-gh-axi/security.svg)](https://skillstore.io/skills/kunchenguid-gh-axi?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/kunchenguid-gh-axi?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/kunchenguid-gh-axi/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/kunchenguid-gh-axi.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

Kun Chen (kunchenguid). (2026). gh-axi security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/kunchenguid-gh-axi/audits/1

BibTeX-Zitat

@techreport{kun-chen-kunchenguid-kunchenguid-gh-axi-2026, author = {Kun Chen (kunchenguid)}, title = {gh-axi security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/kunchenguid-gh-axi/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "gh-axi security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "Kun Chen (kunchenguid)" date-released: "2026-09-27" url: "https://skillstore.io/skills/kunchenguid-gh-axi/audits/1" identifiers: - type: other value: "skillstore:kunchenguid-gh-axi:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel
55
Architektur
85
Wartbarkeit
87
Inhalt
65
Gemeinschaft
83
Spezifikationskonformität

Was Sie erstellen können

Review Repository Activity

Summarize open pull requests, failing checks, and active issues before a planning session.

Manage Stacked Changes

Create and maintain related branches and pull requests for a multi-stage implementation.

Coordinate Releases

Inspect workflow runs, trigger approved automation, and prepare a GitHub release.

Diese Prompts ausprobieren

Inspect Repository Status 
Use gh-axi to inspect the current repository. Summarize open pull requests, failing checks, and urgent issues. Do not modify anything.
Prepare an Issue 
Use gh-axi to draft an issue for [problem]. Include expected behavior, observed behavior, and acceptance criteria. Show the draft before creating it.
Review a Pull Request 
Use gh-axi to inspect pull request [number]. Summarize changes, review status, CI results, and merge blockers. Do not merge without confirmation.
Plan a Stacked Release 
Use gh-axi to assess branches [branches], their pull requests, CI runs, project items, and release readiness. Propose an ordered action plan before changes.

Bewährte Praktiken

  • Start with read-only inspection and summarize findings before applying changes.
  • Confirm destructive, publishing, merging, secret, and workflow-triggering actions with the user.
  • Use current CLI help and pin the reviewed gh-axi package version.

Vermeiden

  • Do not merge pull requests or publish releases without explicit confirmation.
  • Do not expose secrets, tokens, or sensitive variable values in responses.
  • Do not assume command flags from stale skill text when current CLI help is available.

Häufig gestellte Fragen

What GitHub work does this skill cover?
It covers issues, pull requests, CI, workflows, releases, repositories, labels, gists, Projects, secrets, variables, search, and API access.
Does the skill include complete command documentation?
No. It directs the agent to the installed CLI dashboard and help output for current guidance.
Does gh-axi require GitHub authentication?
Yes. GitHub operations require valid authentication and permissions appropriate for each requested action.
Can it manage stacked pull requests?
Yes. Stacked branches and pull requests are included in the skill's stated scope.
Can it change Actions secrets and variables?
Yes, when the authenticated account has permission. Sensitive values should never appear in summaries or logs.
Why should the npm package version be pinned?
Pinning limits unexpected changes and reduces exposure to compromised or incompatible future package releases.

Entwicklerdetails

Lizenz

MIT

Skillstore-Revision

r1

Versionshinweis

Der Autor hat keine Version angegeben.

Repository

https://github.com/kunchenguid/gh-axi/tree/61127ef43674b8ce0127b5019417ce2c51802ed8/skills/gh-axi

Ref.

50b73f83991cf073cbdf3f5afad2bbac71dd3bae

Aktualität der Wartung

30.9.2026

Nutzung

0 Downloads · 0 Aufrufe

Dateistruktur

📄 SKILL.md