# Github Read

> A Claude skill from ParendumOU/Nexora.

- **Type:** Skill
- **Install:** `agentstack add skill-parendumou-nexora-github-read`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [ParendumOU](https://agentstack.voostack.com/s/parendumou)
- **Installs:** 0
- **Category:** [Databases](https://agentstack.voostack.com/c/databases)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [ParendumOU](https://github.com/ParendumOU)
- **Source:** https://github.com/ParendumOU/Nexora/tree/main/backend/src/seeds/skills/builtin/github_read
- **Website:** https://nexora.parendum.com

## Install

```sh
agentstack add skill-parendumou-nexora-github-read
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# GitHub Read

Read access: repos, issues, PRs, files, branches, workflows, runs.

## Canonical tool: `github_api`

ALWAYS use `github_api` — credentials auto-resolved, raw token never exposed. NEVER call `http_request` against `api.github.com` directly.

### Common actions
- `current_user` — confirm auth works
- `list_repos` — repos affiliated with token (scope: affiliations/owned/member/all)
- `list_orgs` — orgs you belong to
- `list_org_repos` — repos within specific org
- `repo_info` — single repo metadata
- `list_issues` / `list_prs` — per-repo
- `read_file` — file at ref
- `list_branches` / `list_commits`
- `list_workflows` / `list_runs` — GitHub Actions
- `search` — global search

See `github_api` tool docs for full arg list.

## Legacy tools

`github_repo_info`, `github_list_issues`, `github_list_prs`, `github_read_file` — back-compat only. Prefer `github_api`.

## Requirements

GitHub credential in platform credential store with `repo` read scope.

Credential = Personal Access Token (PAT) — scoped to human user who issued it:
- `list_repos scope=affiliations` → ONLY repos PAT owner owns, collaborates on, or is org member of. Random public repos NOT included.
- `list_orgs` → ONLY orgs PAT owner belongs to.
- Empty results = PAT genuinely has no affiliation. Do NOT retry guessing org names.

## Anti-hallucination

ALWAYS use real API responses verbatim. NEVER invent:
- Repo names, owners, ids, branch names, file paths, URLs, topics.
- "Probable" repos based on context.
- Repos user "should" have — if API didn't return them, not accessible to this PAT.

Inventory smaller than expected → say so plainly, suggest checking PAT scopes (`repo`, `read:org`). Never pad list.

## Example — inventory

```tool_calls
[
  {"name": "github_api", "args": {"action": "current_user"}},
  {"name": "github_api", "args": {"action": "list_repos", "scope": "owned", "visibility": "private", "max_pages": 5}}
]
```

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [ParendumOU](https://github.com/ParendumOU)
- **Source:** [ParendumOU/Nexora](https://github.com/ParendumOU/Nexora)
- **License:** MIT
- **Homepage:** https://nexora.parendum.com

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-parendumou-nexora-github-read
- Seller: https://agentstack.voostack.com/s/parendumou
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.