Skills github-project-management
📦
github-project-management
v2.0.0 Content revision r1 Medium Risk ⚙️ External commands🌐 Network access📁 Filesystem access
Manage GitHub Projects with Swarm Workflows
GitHub projects can drift across issues, boards, milestones, and sprint rituals. This skill gives Claude, Codex, and Claude Code structured workflows for coordinated GitHub planning and automation.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "github-project-management" from https://skillstore.io/skills/dnyoussef-github-project-management.md and its manifest at https://skillstore.io/api/skills/dnyoussef-github-project-management/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "github-project-management". Triage unlabeled GitHub issues before sprint planning.
Expected outcome:
- Issues are grouped into bug, enhancement, documentation, and investigation queues.
- Each queue includes suggested labels, priority levels, and recommended owners.
- Duplicate candidates and blocked items are called out for manual review.
Using "github-project-management". Create a sprint board workflow for a feature team.
Expected outcome:
- The board includes Backlog, Ready, In Progress, Review, Blocked, and Done states.
- Custom fields track priority, swarm status, owner, milestone, and target sprint.
- Review gates require manual approval before automated status changes.
Using "github-project-management". Prepare a release coordination plan across several repositories.
Expected outcome:
- The plan lists release milestones, dependency risks, cross-repository owners, and reporting cadence.
- It defines escalation points for blocked issues and late testing feedback.
- It recommends final verification before project board automation changes shared state.
Security Audit
Medium Riskv8 • 7/5/2026 Open versioned report
Most static findings are false positives caused by markdown fences, inline code, and visible bash examples in SKILL.md. The skill shows legitimate GitHub project-management intent, but it carries medium contextual risk from unpinned third-party npx commands, automated GitHub mutations, and external webhook sync.
1
Files scanned
1,278
Lines analyzed
0
Review items
0
False positives ignored
Confirmed security concerns (3)
Medium
Unpinned Third-Party CLI Execution
The skill tells users to run npx claude-flow@alpha and many npx ruv-swarm commands. These commands execute third-party package code in a repository context without pinning a stable version or documenting an integrity check.
The npx commands are explicit and frequent, and they would run external package code if executed. No hidden malware intent was found, so the severity is medium rather than high.
Medium
Automated GitHub State Changes Without Confirmation Gates
Several workflows can close duplicate or stale issues, auto-move project cards, and archive completed board items. These are legitimate project operations, but they can cause unwanted repository state changes without a required dry run or approval step.
The cited lines directly show close, auto-management, and archive behavior. The risk is business-logic impact from documented automation, not covert destructive behavior.
Medium
External Webhook Sync May Expose Project Metadata
The real-time board sync example sends updates to an external webhook endpoint. If users configure an untrusted endpoint, private issue, board, or milestone metadata could leave the repository boundary.
The webhook is a placeholder and the skill mentions webhook security, but the workflow still encourages external sync. The data exposure depends on the endpoint a user configures.
Risk Factors
⚙️ External commands (139)
SKILL.md:45-54 SKILL.md:54-58 SKILL.md:58-67 SKILL.md:67-80 SKILL.md:80-92 SKILL.md:104-115 SKILL.md:115-119 SKILL.md:119-135 SKILL.md:135-144 SKILL.md:144-164 SKILL.md:164-170 SKILL.md:170-177 SKILL.md:177-186 SKILL.md:186-207 SKILL.md:207-211 SKILL.md:211-224 SKILL.md:224-233 SKILL.md:233-264 SKILL.md:264-268 SKILL.md:268-307 SKILL.md:307-316 SKILL.md:316-353 SKILL.md:353-364 SKILL.md:364-380 SKILL.md:380-384 SKILL.md:384-427 SKILL.md:427-436 SKILL.md:436-453 SKILL.md:453-457 SKILL.md:457-472 SKILL.md:472-481 SKILL.md:481-487 SKILL.md:487-491 SKILL.md:491-499 SKILL.md:499-503 SKILL.md:503-509 SKILL.md:509-518 SKILL.md:518-544 SKILL.md:544-548 SKILL.md:548-573 SKILL.md:573-584 SKILL.md:584-598 SKILL.md:598-602 SKILL.md:602-609 SKILL.md:609-613 SKILL.md:613-622 SKILL.md:622-631 SKILL.md:631-650 SKILL.md:650-654 SKILL.md:654-667 SKILL.md:667-671 SKILL.md:671-688 SKILL.md:688-697 SKILL.md:697-704 SKILL.md:704-715 SKILL.md:715-730 SKILL.md:730-739 SKILL.md:739-745 SKILL.md:745-749 SKILL.md:749-755 SKILL.md:755-764 SKILL.md:764-770 SKILL.md:770-779 SKILL.md:779-786 SKILL.md:786-790 SKILL.md:790-797 SKILL.md:797-801 SKILL.md:801-808 SKILL.md:808-818 SKILL.md:818-857 SKILL.md:857-861 SKILL.md:861-896 SKILL.md:896-900 SKILL.md:900-940 SKILL.md:940-944 SKILL.md:944-970 SKILL.md:970-978 SKILL.md:978-996 SKILL.md:996-1000 SKILL.md:1000-1009 SKILL.md:1009-1017 SKILL.md:1017-1024 SKILL.md:1024-1028 SKILL.md:1028-1035 SKILL.md:1035-1039 SKILL.md:1039-1046 SKILL.md:1046-1094 SKILL.md:1094-1100 SKILL.md:1100-1104 SKILL.md:1104-1111 SKILL.md:1111-1115 SKILL.md:1115-1122 SKILL.md:1122-1150 SKILL.md:1150-1155 SKILL.md:1155-1159 SKILL.md:1159-1164 SKILL.md:1164-1182 SKILL.md:1182-1183 SKILL.md:1183-1184 SKILL.md:1184-1185 SKILL.md:1185-1193 SKILL.md:1193-1237 SKILL.md:1237-1243 SKILL.md:1243-1262 SKILL.md:60-61 SKILL.md:146 SKILL.md:155 SKILL.md:235 SKILL.md:238-241 SKILL.md:244 SKILL.md:254 SKILL.md:255 SKILL.md:270 SKILL.md:273 SKILL.md:276-277 SKILL.md:283-286 SKILL.md:304 SKILL.md:318 SKILL.md:319-320 SKILL.md:325 SKILL.md:328-330 SKILL.md:349 SKILL.md:366-367 SKILL.md:459 SKILL.md:633 SKILL.md:636 SKILL.md:638 SKILL.md:1197-1213 SKILL.md:1217 SKILL.md:1224 SKILL.md:58-67 SKILL.md:144-164 SKILL.md:233-264 SKILL.md:268-307 SKILL.md:316-353 SKILL.md:364-380 SKILL.md:457-472 SKILL.md:631-650 SKILL.md:1193-1237
🌐 Network access (7)
📁 Filesystem access (1)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/dnyoussef-github-project-management/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/dnyoussef-github-project-management?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/dnyoussef-github-project-management?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dnyoussef-github-project-management/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/dnyoussef-github-project-management.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
Claude Code. (2026). github-project-management security audit report (audit version 8) [Author version 2.0.0]. Skillstore. https://skillstore.io/skills/dnyoussef-github-project-management/audits/8BibTeX citation
@techreport{claude-code-dnyoussef-github-project-management-2026,
author = {Claude Code},
title = {github-project-management security audit report (audit version 8)},
institution = {Skillstore},
year = {2026},
number = {8},
url = {https://skillstore.io/skills/dnyoussef-github-project-management/audits/8},
note = {Author version 2.0.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "github-project-management security audit report (audit version 8)"
version: "2.0.0"
type: report
authors:
- name: "Claude Code"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/dnyoussef-github-project-management/audits/8"
identifiers:
- type: other
value: "skillstore:dnyoussef-github-project-management:audit:8"
description: "Skillstore immutable audit report identifier"
Compare variants
2 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
Highest Skillstore Score
Author / source Skillstore Score Evidence Confidence Skillstore usage Updated
dnyoussef-github-project-management
Skillstore Score 50
Evidence Confidence High
Skillstore usage 8
Updated
2026-08-21
ruvnet-github-project-management
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 10
Updated
2026-08-21
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
100
Maintainability
87
Content
72
Community
78
Spec Compliance
What You Can Build
Triage a Busy Issue Backlog
Group unlabeled issues by priority, assign labels, identify duplicates, and prepare coordinated follow-up work.
Run a Sprint Planning Board
Create board fields, sprint views, milestone tracking, and progress reporting for an upcoming development cycle.
Coordinate Multi-Repository Delivery
Track dependencies, release milestones, and work distribution across related repositories and project boards.
Try These Prompts
Start Issue Triage
Use the GitHub project management skill to create a clear issue triage plan for this repository. Include labels, priorities, owners, and next steps.
Plan One Issue
Use this skill to turn issue number 123 into a coordinated implementation plan. Break it into subtasks, owners, review points, and progress updates.
Design a Sprint Board
Use this skill to design a GitHub Projects board workflow for the next sprint. Include fields, columns, automation rules, and review gates.
Coordinate a Release
Use this skill to coordinate a cross-repository release plan. Include milestone tracking, dependency handling, risk controls, and reporting checkpoints.
Best Practices
- Confirm the repository, project board, labels, and permissions before running automation.
- Use dry-run review or manual approval before closing, archiving, or bulk-moving work.
- Pin and verify third-party CLI packages before using npx-based workflows.
Avoid
- Running automated close or archive commands on production repositories without review.
- Sending project sync data to unverified webhook endpoints.
- Granting broad GitHub permissions when narrower scopes are enough.
Frequently Asked Questions
Does this skill require GitHub CLI?
Yes. The documented shell workflows assume GitHub CLI is installed, authenticated, and authorized for the target repository.
Can it work with Claude, Codex, and Claude Code?
Yes. The report lists support for Claude, Codex, and Claude Code, with workflows written as reusable prompts and command examples.
Will it change my GitHub repository automatically?
Some examples create, edit, close, or move GitHub issues and project items. Review commands before execution.
Does it manage private repository data?
It can read and process issue, project, milestone, and board data when permissions allow it. Use least-privilege access.
Are the swarm tools built into GitHub?
No. The workflows reference external tools such as ruv-swarm and claude-flow that must be installed and trusted separately.
What should I verify before using webhook sync?
Verify the endpoint owner, authentication, signing, data scope, and retention policy before sending project updates.
Developer Details
Author
Claude CodeLicense
MIT
Author version
v2.0.0
Skillstore revision
r1
Repository
https://github.com/DNYoussef/ai-chrome-extension/tree/main/.claude/skills/github-project-managementRef
c579efd02184f1128d6741d16e6c8d951d7d4208
Maintenance freshness
7/21/2026
Usage
6 downloads · 345 views
File structure
📄 SKILL.md