Install
$ agentstack add skill-parendumou-nexora-github-read ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
GitHub Read
Read access: repos, issues, PRs, files, branches, workflows, runs.
Canonical tool: github_api
ALWAYS use github_api — credentials auto-resolved, raw token never exposed. NEVER call http_request against api.github.com directly.
Common actions
current_user— confirm auth workslist_repos— repos affiliated with token (scope: affiliations/owned/member/all)list_orgs— orgs you belong tolist_org_repos— repos within specific orgrepo_info— single repo metadatalist_issues/list_prs— per-reporead_file— file at reflist_branches/list_commitslist_workflows/list_runs— GitHub Actionssearch— global search
See github_api tool docs for full arg list.
Legacy tools
github_repo_info, github_list_issues, github_list_prs, github_read_file — back-compat only. Prefer github_api.
Requirements
GitHub credential in platform credential store with repo read scope.
Credential = Personal Access Token (PAT) — scoped to human user who issued it:
list_repos scope=affiliations→ ONLY repos PAT owner owns, collaborates on, or is org member of. Random public repos NOT included.list_orgs→ ONLY orgs PAT owner belongs to.- Empty results = PAT genuinely has no affiliation. Do NOT retry guessing org names.
Anti-hallucination
ALWAYS use real API responses verbatim. NEVER invent:
- Repo names, owners, ids, branch names, file paths, URLs, topics.
- "Probable" repos based on context.
- Repos user "should" have — if API didn't return them, not accessible to this PAT.
Inventory smaller than expected → say so plainly, suggest checking PAT scopes (repo, read:org). Never pad list.
Example — inventory
[
{"name": "github_api", "args": {"action": "current_user"}},
{"name": "github_api", "args": {"action": "list_repos", "scope": "owned", "visibility": "private", "max_pages": 5}}
]
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: ParendumOU
- Source: ParendumOU/Nexora
- License: MIT
- Homepage: https://nexora.parendum.com
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.