Skills github
📦

github

Content revision r1 Medium Risk ⚙️ External commands

Manage GitHub Workflows with the gh CLI

GitHub project work often requires several precise gh commands across pull requests, issues, and Actions. This skill gives Claude, Codex, and Claude Code a concise command guide for common repository tasks.

Supports: Claude Codex Code(CC)
📊 70 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "github" from https://skillstore.io/skills/eteissonniere-github.md and its manifest at https://skillstore.io/api/skills/eteissonniere-github/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/eteissonniere-github.md Signed manifest GET /api/skills/eteissonniere-github/manifest Signed lockfile GET /api/skills/eteissonniere-github/lockfile

Test it

Using "github". Show me the context for pull request 42.

Expected outcome:

The assistant confirms GitHub access, opens the pull request with comments, and summarizes status, reviewers, and unresolved feedback.

Using "github". Find out why the latest workflow failed.

Expected outcome:

The assistant lists recent workflow runs, opens the failed run logs, and reports the failing job with the key error message.

Using "github". Create a new issue for this bug report.

Expected outcome:

The assistant prepares the issue title and body, checks authentication, and asks for confirmation before submitting.

Security Audit

Medium Risk
v8 • 7/5/2026 Open versioned report

The static Ruby backtick findings are false positives caused by Markdown inline code and fenced command examples. No evidence found of prompt injection or hidden malicious instructions. A medium semantic risk remains because the skill lists state-changing GitHub actions without a required confirmation rule.

1
Files scanned
81
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
SKILL.md:46-47SKILL.md:56SKILL.md:66
State-Changing GitHub Operations Need Confirmation
The skill lists commands for merging and approving pull requests, closing issues, and rerunning workflow jobs without requiring explicit user confirmation. In an agent context, these actions can modify repository and CI state.
The cited lines contain state-changing gh operations. The surrounding guidance does not add a mandatory confirmation step, so the risk is clear but depends on user permissions.

Risk Factors

⚙️ External commands (36)
SKILL.md:10 SKILL.md:11-13 SKILL.md:13-15 SKILL.md:15-20 SKILL.md:20-22 SKILL.md:22-24 SKILL.md:24-28 SKILL.md:28-29 SKILL.md:29-30 SKILL.md:30-31 SKILL.md:31-39 SKILL.md:39-40 SKILL.md:40-41 SKILL.md:41-42 SKILL.md:42-43 SKILL.md:43-44 SKILL.md:44-45 SKILL.md:45-46 SKILL.md:46-47 SKILL.md:47-52 SKILL.md:52-53 SKILL.md:53-54 SKILL.md:54-55 SKILL.md:55-56 SKILL.md:56-57 SKILL.md:57-62 SKILL.md:62-63 SKILL.md:63-64 SKILL.md:64-65 SKILL.md:65-66 SKILL.md:66-71 SKILL.md:71-72 SKILL.md:72-73 SKILL.md:73-74 SKILL.md:74-78 SKILL.md:78-80
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/eteissonniere-github/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/eteissonniere-github/security.svg)](https://skillstore.io/skills/eteissonniere-github?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/eteissonniere-github?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/eteissonniere-github/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/eteissonniere-github.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

ETeissonniere. (2026). github security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/eteissonniere-github/audits/8

BibTeX citation

@techreport{eteissonniere-eteissonniere-github-2026, author = {ETeissonniere}, title = {github security audit report (audit version 8)}, institution = {Skillstore}, year = {2026}, number = {8}, url = {https://skillstore.io/skills/eteissonniere-github/audits/8}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "github security audit report (audit version 8)" version: "unspecified" type: report authors: - name: "ETeissonniere" date-released: "2026-07-05" url: "https://skillstore.io/skills/eteissonniere-github/audits/8" identifiers: - type: other value: "skillstore:eteissonniere-github:audit:8" description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score
Dicklesworthstone Recommended

dicklesworthstone-github

Skillstore Score 71
Evidence Confidence High
Skillstore usage 7
Updated

2026-08-21

ETeissonniere Current

eteissonniere-github

Skillstore Score 70
Evidence Confidence High
Skillstore usage 8
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance

What You Can Build

Review a Pull Request

Open a pull request, include comments, inspect the diff, and prepare a review summary.

Triage Repository Issues

List assigned issues, view issue details, add comments, and close resolved work.

Investigate CI Failures

List recent workflow runs, view logs, watch progress, and rerun failed jobs when approved.

Try These Prompts

Check GitHub Access 
Use the GitHub skill to confirm this repository is on GitHub and check my gh authentication status.
Open Pull Request Context 
Use the GitHub skill to view pull request 123 with comments and summarize the review discussion.
Investigate Failed CI 
Use the GitHub skill to list recent workflow runs, view the failed run logs, and identify the failing job.
Query Review Data 
Use the GitHub skill to call the GitHub API for pull request 123 comments and summarize unresolved threads.

Best Practices

  • Confirm the repository remote and gh authentication before using GitHub commands.
  • Ask for explicit approval before commands that change repository, PR, issue, or workflow state.
  • Use comments, logs, and diff views before making recommendations about reviews or CI actions.

Avoid

  • Running merge, approve, close, or rerun commands without user approval.
  • Using placeholder IDs without verifying the target PR, issue, workflow run, or repository.
  • Triggering new workflows before checking recent runs and existing failures.

Frequently Asked Questions

What does this skill help with?
It helps an AI assistant use the GitHub CLI for pull requests, issues, workflow runs, repositories, and API calls.
Does it require GitHub authentication?
Yes. The skill instructs the assistant to check gh authentication before any operation.
Can it create or merge pull requests?
It provides command guidance for those tasks, but the assistant should request confirmation before changing remote state.
Can it inspect GitHub Actions logs?
Yes. It includes guidance for listing workflow runs, viewing logs, watching runs, and rerunning failed jobs.
Does it handle non-GitHub remotes?
No. The skill is intended for repositories whose git remotes include github.com.
Can it use GitHub API endpoints?
Yes. It includes a gh API example for operations not covered by standard CLI commands.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/ETeissonniere/dotfiles/tree/master/config/claude/skills/github

Ref

30c73eac2afe762f6aa9c4553158769369d47351

Maintenance freshness

7/20/2026

Usage

6 downloads · 180 views

File structure

📄 SKILL.md