# Automate GitHub Workflows with Rube MCP

GitHub maintenance requires many separate searches, checks, and updates. This skill coordinates repository workflows through Rube MCP with practical safeguards and validation guidance.

## Install

```bash
npx skillstore add sickn33/github-automation
```

## Metadata

- Status: approved
- Slug: sickn33-github-automation
- Skillstore revision: r2
- Version status: missing
- Tree hash: 46d617fcd563cf1226e249bc030b50a618755cb30e75aab891c385a1fc2bf731
- Author: sickn33
- GitHub username: sickn33
- License: MIT
- Repository: https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/github-automation
- Ref: 88a8e9a07f4c54ab105c1c41b6267c287146b07b
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: confirmation\_required
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands, network
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/sickn33-github-automation
- Manifest: https://skillstore.pages.dev/api/skills/sickn33-github-automation/manifest

## Capabilities

- List and inspect repositories available to the authenticated GitHub user.
- Create, list, search, and comment on GitHub issues.
- Find, inspect, create, and merge pull requests.
- Create repositories and branches, and update repository settings.
- Search code and commits with GitHub query qualifiers.
- Inspect or trigger workflows, check CI, review deployments, and inspect repository permissions.

## Use Cases

- Maintain pull request queues: Inspect changed files, mergeability, and CI status before preparing a merge decision.
- Organize issue backlogs: Find, create, label, assign, and comment on repository issues with clear repository context.
- Review repository operations: Inspect workflows, deployments, collaborators, permissions, and branch protection before proposing controlled changes.

## Prompt Templates

### List open work

```
List open issues in [owner/repo], separate pull requests, and summarize title, labels, assignee, and age. Do not modify anything.
```

### Prepare an issue

```
Prepare an issue in [owner/repo] titled [title] with [body]. Show the proposal and ask before creating it.
```

### Assess a pull request

```
Review pull request [number] in [owner/repo], inspect changed files and CI status, then recommend whether it is ready to merge.
```

### Audit access controls

```
Audit [owner/repo] branch protection and collaborator permissions, propose changes, and require approval before every access or protection update.
```

## Limitations

- Requires Rube MCP and an active GitHub OAuth connection.
- Available actions depend on GitHub permissions granted through Rube.
- Search and list operations inherit GitHub size, result, and pagination limits.
- High-impact actions still require user approval and environment-specific validation.

## Best Practices

- Call RUBE\_SEARCH\_TOOLS before workflows so each action uses the current tool schema.
- Verify the repository, branch, identifiers, permissions, pagination, and current state before acting.
- Require explicit approval before merges, workflow dispatches, repository updates, collaborator changes, or branch protection changes.

## Anti Patterns

- Do not merge, delete, or alter access controls from an ambiguous request.
- Do not treat one result page as a complete repository inventory.
- Do not share OAuth links, repository content, or credentials with unrelated services.

## Security Audit

- Audited at: 2026-07-23T23:52:01.26\+00:00
- Summary: All 116 external-command alerts are false positives caused by Markdown inline code, not shell execution. The Rube endpoint is a real third-party network dependency that delegates GitHub access through OAuth. Workflow dispatch and access-control changes lack explicit confirmation requirements, although merge and deletion are guarded.

## Stats

- Views: 116
- Downloads: 10
- Favorites: 0
- Popularity score: 0