Habilidades gh-axi
📦

gh-axi

Revisión del contenido r1 Seguro ⚙️ Comandos externos

Manage GitHub Workflows with gh-axi

GitHub work often requires many commands across issues, pull requests, CI, releases, and projects. This skill directs agents to gh-axi for current commands and task execution.

Compatible con: Claude Codex Code(CC)
Maintain this Skill? Claim it 🥉 77 Bronce

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente
Review the Skillstore skill "gh-axi" from https://skillstore.io/skills/kunchenguid-gh-axi.md and its manifest at https://skillstore.io/api/skills/kunchenguid-gh-axi/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/kunchenguid-gh-axi.md Manifest firmado GET /api/skills/kunchenguid-gh-axi/manifest Lockfile firmado GET /api/skills/kunchenguid-gh-axi/lockfile

Pruébalo

Usando "gh-axi". Summarize the current repository without making changes.

Resultado esperado:

Repository status: two open pull requests, one failing CI check, and three active issues. Pull request 42 is blocked by tests.

Usando "gh-axi". Review pull request 42 and identify merge blockers.

Resultado esperado:

  • Review status: one approval and one requested change.
  • Checks: unit tests failed; lint and build passed.
  • Merge blocker: resolve the requested change and rerun unit tests.

Usando "gh-axi". Prepare a release readiness summary.

Resultado esperado:

Release readiness: the target milestone is complete, but one workflow remains unsuccessful. No release action was taken.

Auditoría de seguridad

Seguro
v1 • 27/9/2026 Abrir el informe versionado

Two Markdown references are false positives because backticks only format CLI names. Three examples invoke an unpinned npm package through npx -y, creating remote code execution and supply-chain exposure.

1
Archivos escaneados
25
Líneas analizadas
3
Elementos de revisión
0
Falsos positivos ignorados
Elementos de revisión de capacidades (3)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Medio
SKILL.md:22
Ruby/shell backtick execution
- `npx -y gh-axi` for a dashboard of the current repo
The instruction runs npx with automatic confirmation and no package version. This can download and execute changing third-party package code.
Medio
SKILL.md:23
Ruby/shell backtick execution
- `npx -y gh-axi --help` for global flags and the command index
The help command still invokes an unpinned package through npx -y. Package installation scripts and CLI startup code can execute locally.
Medio
SKILL.md:24
Ruby/shell backtick execution
- `npx -y gh-axi <command> --help` for per-command usage
This per-command help example executes the same unpinned npm package without confirmation. The placeholder does not remove the package execution risk.

Factores de riesgo

⚙️ Comandos externos (5)
SKILL.md:3 SKILL.md:14 SKILL.md:22 SKILL.md:23 SKILL.md:24
Auditado por: codex
Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado
Evaluación de seguridad

Copiar enlace del informe

https://skillstore.io/skills/kunchenguid-gh-axi/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/kunchenguid-gh-axi/security.svg)](https://skillstore.io/skills/kunchenguid-gh-axi?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/kunchenguid-gh-axi?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/kunchenguid-gh-axi/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/kunchenguid-gh-axi.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citas académicas (APA · BibTeX · CFF)

Cita APA

Kun Chen (kunchenguid). (2026). gh-axi security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/kunchenguid-gh-axi/audits/1

Cita BibTeX

@techreport{kun-chen-kunchenguid-kunchenguid-gh-axi-2026, author = {Kun Chen (kunchenguid)}, title = {gh-axi security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/kunchenguid-gh-axi/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "gh-axi security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "Kun Chen (kunchenguid)" date-released: "2026-09-27" url: "https://skillstore.io/skills/kunchenguid-gh-axi/audits/1" identifiers: - type: other value: "skillstore:kunchenguid-gh-axi:audit:1" description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio
55
Arquitectura
85
Mantenibilidad
87
Contenido
65
Comunidad
83
Cumplimiento de la especificación

Lo que puedes crear

Review Repository Activity

Summarize open pull requests, failing checks, and active issues before a planning session.

Manage Stacked Changes

Create and maintain related branches and pull requests for a multi-stage implementation.

Coordinate Releases

Inspect workflow runs, trigger approved automation, and prepare a GitHub release.

Prueba estos prompts

Inspect Repository Status 
Use gh-axi to inspect the current repository. Summarize open pull requests, failing checks, and urgent issues. Do not modify anything.
Prepare an Issue 
Use gh-axi to draft an issue for [problem]. Include expected behavior, observed behavior, and acceptance criteria. Show the draft before creating it.
Review a Pull Request 
Use gh-axi to inspect pull request [number]. Summarize changes, review status, CI results, and merge blockers. Do not merge without confirmation.
Plan a Stacked Release 
Use gh-axi to assess branches [branches], their pull requests, CI runs, project items, and release readiness. Propose an ordered action plan before changes.

Mejores prácticas

  • Start with read-only inspection and summarize findings before applying changes.
  • Confirm destructive, publishing, merging, secret, and workflow-triggering actions with the user.
  • Use current CLI help and pin the reviewed gh-axi package version.

Evitar

  • Do not merge pull requests or publish releases without explicit confirmation.
  • Do not expose secrets, tokens, or sensitive variable values in responses.
  • Do not assume command flags from stale skill text when current CLI help is available.

Preguntas frecuentes

What GitHub work does this skill cover?
It covers issues, pull requests, CI, workflows, releases, repositories, labels, gists, Projects, secrets, variables, search, and API access.
Does the skill include complete command documentation?
No. It directs the agent to the installed CLI dashboard and help output for current guidance.
Does gh-axi require GitHub authentication?
Yes. GitHub operations require valid authentication and permissions appropriate for each requested action.
Can it manage stacked pull requests?
Yes. Stacked branches and pull requests are included in the skill's stated scope.
Can it change Actions secrets and variables?
Yes, when the authenticated account has permission. Sensitive values should never appear in summaries or logs.
Why should the npm package version be pinned?
Pinning limits unexpected changes and reduces exposure to compromised or incompatible future package releases.

Detalles del desarrollador

Licencia

MIT

Revisión de Skillstore

r1

Aviso de versión

El autor no declaró una versión.

Repositorio

https://github.com/kunchenguid/gh-axi/tree/61127ef43674b8ce0127b5019417ce2c51802ed8/skills/gh-axi

Ref.

50b73f83991cf073cbdf3f5afad2bbac71dd3bae

Actualidad del mantenimiento

30/9/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📄 SKILL.md