Install
$ agentstack add skill-justvugg-tools-factory-github ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
github
Generated by Gutenberg. Use this skill to call the github API through the local github CLI.
When to use
- The user asks for data exposed by github (actions, activity, agent-tasks, agents, apps, billing).
- An agent task needs structured JSON from https://api.github.com.
- You need to perform a write/destructive operation on github — always preview first, run with
--yesonly on explicit user confirmation.
How to invoke
The skill assumes the generated CLI is on PATH (or invoke via scripts/use-go.sh run ./cmd/github from the project directory).
github operations
github call meta/root --json
github sync --json
github search "" --json
Preview a write operation (default behavior, no side effects):
github call agent-tasks/create-task-in-repo --data '{"example":true}' --json
Execute it (only after explicit user confirmation):
github call agent-tasks/create-task-in-repo --data '{"example":true}' --yes --json
Authentication
No authentication required.
Operations index
meta/root(GET /) — read — GitHub API Rootsecurity-advisories/list-global-advisories(GET /advisories) — read — List global security advisoriessecurity-advisories/get-global-advisory(GET /advisories/{ghsa_id}) — read — Get a global security advisoryagent-tasks/list-tasks-for-repo(GET /agents/repos/{owner}/{repo}/tasks) — read — List tasks for repositoryagent-tasks/create-task-in-repo(POST /agents/repos/{owner}/{repo}/tasks) — write — Start a taskagent-tasks/get-task-by-repo-and-id(GET /agents/repos/{owner}/{repo}/tasks/{task_id}) — read — Get a task by repoagent-tasks/list-tasks(GET /agents/tasks) — read — List tasksagent-tasks/get-task-by-id(GET /agents/tasks/{task_id}) — read — Get a task by IDapps/get-authenticated(GET /app) — read — Get the authenticated appapps/create-from-manifest(POST /app-manifests/{code}/conversions) — write — Create a GitHub App from a manifestapps/get-webhook-config-for-app(GET /app/hook/config) — read — Get a webhook configuration for an appapps/update-webhook-config-for-app(PATCH /app/hook/config) — write — Update a webhook configuration for an appapps/list-webhook-deliveries(GET /app/hook/deliveries) — read — List deliveries for an app webhookapps/get-webhook-delivery(GET /app/hook/deliveries/{delivery_id}) — read — Get a delivery for an app webhookapps/redeliver-webhook-delivery(POST /app/hook/deliveries/{delivery_id}/attempts) — write — Redeliver a delivery for an app webhookapps/list-installation-requests-for-authenticated-app(GET /app/installation-requests) — read — List installation requests for the authenticated appapps/list-installations(GET /app/installations) — read — List installations for the authenticated appapps/get-installation(GET /app/installations/{installation_id}) — read — Get an installation for the authenticated appapps/delete-installation(DELETE /app/installations/{installation_id}) — destructive — Delete an installation for the authenticated appapps/create-installation-access-token(POST /app/installations/{installationid}/accesstokens) — write — Create an installation access token for an appapps/suspend-installation(PUT /app/installations/{installation_id}/suspended) — write — Suspend an app installationapps/unsuspend-installation(DELETE /app/installations/{installation_id}/suspended) — destructive — Unsuspend an app installationapps/delete-authorization(DELETE /applications/{client_id}/grant) — destructive — Delete an app authorizationapps/check-token(POST /applications/{client_id}/token) — write — Check a tokenapps/reset-token(PATCH /applications/{client_id}/token) — write — Reset a tokenapps/delete-token(DELETE /applications/{client_id}/token) — destructive — Delete an app tokenapps/scope-token(POST /applications/{client_id}/token/scoped) — write — Create a scoped access tokenapps/get-by-slug(GET /apps/{app_slug}) — read — Get an appclassroom/get-an-assignment(GET /assignments/{assignment_id}) — read — Get an assignmentclassroom/list-accepted-assignments-for-an-assignment(GET /assignments/{assignmentid}/acceptedassignments) — read — List accepted assignments for an assignmentclassroom/get-assignment-grades(GET /assignments/{assignment_id}/grades) — read — Get assignment gradesclassroom/list-classrooms(GET /classrooms) — read — List classroomsclassroom/get-a-classroom(GET /classrooms/{classroom_id}) — read — Get a classroomclassroom/list-assignments-for-a-classroom(GET /classrooms/{classroom_id}/assignments) — read — List assignments for a classroomcodes-of-conduct/get-all-codes-of-conduct(GET /codesofconduct) — read — Get all codes of conductcodes-of-conduct/get-conduct-code(GET /codesofconduct/{key}) — read — Get a code of conductcredentials/revoke(POST /credentials/revoke) — write — Revoke a list of credentialsemojis/get(GET /emojis) — read — Get emojisactions/get-actions-cache-retention-limit-for-enterprise(GET /enterprises/{enterprise}/actions/cache/retention-limit) — read — Get GitHub Actions cache retention limit for an enterpriseactions/set-actions-cache-retention-limit-for-enterprise(PUT /enterprises/{enterprise}/actions/cache/retention-limit) — write — Set GitHub Actions cache retention limit for an enterpriseactions/get-actions-cache-storage-limit-for-enterprise(GET /enterprises/{enterprise}/actions/cache/storage-limit) — read — Get GitHub Actions cache storage limit for an enterpriseactions/set-actions-cache-storage-limit-for-enterprise(PUT /enterprises/{enterprise}/actions/cache/storage-limit) — write — Set GitHub Actions cache storage limit for an enterpriseoidc/list-oidc-custom-property-inclusions-for-enterprise(GET /enterprises/{enterprise}/actions/oidc/customization/properties/repo) — read — List OIDC custom property inclusions for an enterpriseoidc/create-oidc-custom-property-inclusion-for-enterprise(POST /enterprises/{enterprise}/actions/oidc/customization/properties/repo) — write — Create an OIDC custom property inclusion for an enterpriseoidc/delete-oidc-custom-property-inclusion-for-enterprise(DELETE /enterprises/{enterprise}/actions/oidc/customization/properties/repo/{custompropertyname}) — destructive — Delete an OIDC custom property inclusion for an enterprisecode-security/get-configurations-for-enterprise(GET /enterprises/{enterprise}/code-security/configurations) — read — Get code security configurations for an enterprisecode-security/create-configuration-for-enterprise(POST /enterprises/{enterprise}/code-security/configurations) — write — Create a code security configuration for an enterprisecode-security/get-default-configurations-for-enterprise(GET /enterprises/{enterprise}/code-security/configurations/defaults) — read — Get default code security configurations for an enterprisecode-security/get-single-configuration-for-enterprise(GET /enterprises/{enterprise}/code-security/configurations/{configuration_id}) — read — Retrieve a code security configuration of an enterprisecode-security/update-enterprise-configuration(PATCH /enterprises/{enterprise}/code-security/configurations/{configuration_id}) — write — Update a custom code security configuration for an enterprise
…and 1133 more. Run github operations --json for the full list.
Output contract
- All commands accept
--jsonand emit machine-readable output. callreturns{ dryRun, operation, request, response }.dryRun: truemeans the call was not executed (write op without--yes).searchreturns cached records.syncpopulates the local SQLite cache.
Provenance
- Schema: gutenberg.blueprint.v1
- Generated by: gutenberg 0.3.0
- Source spec: /tmp/github-api.json
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: JustVugg
- Source: JustVugg/tools-factory
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.