gh
Use GitHub CLI Reliably in Agent Workflows
GitHub automation can fail when agents parse display output, overlook result limits, or target the wrong repository. This skill provides GitHub CLI patterns for structured queries, pagination, repository selection, and authentication handling.
๋ด ์์ด์ ํธ๋ก ์ค์น
์ด ์์ฒญ์ ์์ด์ ํธ์ ๋ณต์ฌํ์ธ์. ๊ณต์ Skill ํ์ด์ง์ ๋งค๋ํ์คํธ๊ฐ ํฌํจ๋์ด ์์ต๋๋ค.
Review the Skillstore skill "gh" from https://skillstore.io/skills/cli-gh.md and its manifest at https://skillstore.io/api/skills/cli-gh/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.์์ด์ ํธ๋ ๊ณ์ํด์ ๊ณํ์ ํ์ํ๊ณ ๋ณด์ ์ ์ฑ ์์ ์๊ตฌํ๋ ํ์ธ์ ์์ฒญํด์ผ ํฉ๋๋ค.
์์ด์ ํธ๊ฐ ์ฝ๊ธฐ ์ฌ์ด ๋ฆฌ์์ค
AI ์์ด์ ํธ, ํฌ๋กค๋ฌ, ์คํฌ๋ฆฝํธ๊ฐ ์ ์ฒด ํ์ด์ง ๋์ ์ ๋ฆฌ๋ ์ปจํ ์คํธ๋ง ํ์ํ ๋ ์ด ๋งํฌ๋ฅผ ์ฌ์ฉํ์ธ์.
ํ ์คํธํด ๋ณด๊ธฐ
"gh" ์ฌ์ฉ ์ค์ ๋๋ค. Explain how to inspect a pull request without changing branches.
์์ ๊ฒฐ๊ณผ:
- Use the pull request view for metadata and the diff view for changed lines.
- Retrieve review-thread comments through the pull request comments API.
- Avoid checkout when the task only requires inspection.
"gh" ์ฌ์ฉ ์ค์ ๋๋ค. Explain whether a 30-item issue list proves the repository has 30 open issues.
์์ ๊ฒฐ๊ณผ:
- No. List commands usually cap results at 30 by default.
- Increase the explicit limit for a larger sample or use API pagination.
- Use a GraphQL total count when an exact aggregate is required.
"gh" ์ฌ์ฉ ์ค์ ๋๋ค. Explain what to do when authentication reports refresh_expired.
์์ ๊ฒฐ๊ณผ:
- The refresh token was rejected.
- Ask the user to run interactive login or authentication refresh.
- Avoid repeated retries and do not request token values.
๋ณด์ ๊ฐ์ฌ
์์ All 226 static findings are false positives: Markdown formatting, a GitHub URL template, authentication documentation, and search error guidance. No evidence found of prompt injection, credential exfiltration, or malicious intent in SKILL.md. The skill documents legitimate GitHub operations, including writes and downloads, which still require user authorization and appropriate permissions.
์ํ ์์ธ
โ๏ธ ์ธ๋ถ ๋ช ๋ น์ด (50)
๐ ๋คํธ์ํฌ ์ ๊ทผ (1)
๐ ํ๊ฒฝ ๋ณ์ (1)
์ด ๋ณด๊ณ ์ ๊ณต์ ๋ฐ ์ธ์ฉ
๋ฒ์ ์ด ์ง์ ๋ ํ๊ฐ ๋ณด๊ณ ์, ์ค๋ฆฝ ๋ฐฐ์ง, ์๋ฒ ๋ ์นด๋ ๋ฐ ์ธ์ฉ์ ๊ณต์ ํ์ธ์. Skillstore๋ ๊ทผ๊ฑฐ๋ฅผ ๋ณด๊ณ ํ์ง๋ง ์ด Skill์ ์์ ์ฌ๋ถ๋ฅผ ํ๋จํ์ง ์์ต๋๋ค.
๋ณด๊ณ ์ ๋งํฌ ๋ณต์ฌ
https://skillstore.io/skills/cli-gh/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown ๋ฐฐ์ง
[](https://skillstore.io/skills/cli-gh?utm_source=security_passport_badge)HTML ๋ฐฐ์ง
<a href="https://skillstore.io/skills/cli-gh?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cli-gh/security.svg" alt="Skillstore security assessment" loading="lazy"></a>์๋ฒ ๋ ์นด๋
<iframe src="https://skillstore.io/embed/skills/cli-gh.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>ํ์ ์ธ์ฉ (APA ยท BibTeX ยท CFF)
APA ์ธ์ฉ
cli. (2026). gh security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cli-gh/audits/1BibTeX ์ธ์ฉ
@techreport{cli-cli-gh-2026,
author = {cli},
title = {gh security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/cli-gh/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "gh security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "cli"
date-released: "2026-10-28"
url: "https://skillstore.io/skills/cli-gh/audits/1"
identifiers:
- type: other
value: "skillstore:cli-gh:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore ์ ์
์ด ์ ์์ ์ด์ ์ฆ๊ฑฐ ์ ๋ขฐ๋: ์ค๊ฐ๋ง๋ค ์ ์๋ ๊ฒ
Inspect Pull Requests
Review changes and retrieve review-thread comments using structured queries without switching the current branch.
Triage Repository Issues
Find related issues, inspect dependency relationships, and detect incomplete result sets before planning updates.
Collect Repository Reports
Gather selected fields across repositories using search, pagination, and API queries for repeatable reporting.
์ด ํ๋กฌํํธ๋ฅผ ์ฌ์ฉํด ๋ณด์ธ์
List up to 20 open issues in [OWNER/REPO] using GitHub CLI. Return issue numbers and titles, and state the result limit.
Inspect pull request [NUMBER] in [OWNER/REPO] without changing branches. Summarize the diff and review-thread comments using structured output and API fallback.
Inspect parent, sub-issue, and blocking relationships for issue [NUMBER] in [OWNER/REPO]. Compare returned nodes with totalCount and flag truncation. Make no changes.
Report open Dependabot pull requests across [REPOSITORIES] using structured GitHub CLI queries. Handle pagination and explain limits. Prefer gh api without exposing tokens.
๋ชจ๋ฒ ์ฌ๋ก
- Specify the repository explicitly and request only the structured fields needed for the task.
- Set result limits, use pagination when needed, and compare relationship node counts with reported totals.
- Confirm authorization before uploads, edits, deletions, or overwrites, and prefer gh api to handling raw tokens.
ํผํ๊ธฐ
- Parse display tables or treat a capped result list as a complete repository inventory.
- Switch branches for read-only inspection or overwrite local files without approval.
- Expose authentication tokens or upload local files without checking their contents and destination.