Install
$ agentstack add skill-paulrberg-dot-agents-cli-gh ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
GitHub CLI
Route GitHub CLI work through current gh help and load only the reference for the active task.
Boundary with yeet
Use yeet when the requested outcome is to create or update a pull request, issue, issue comment, or discussion. yeet owns semantic analysis, repository templates, Paul's writing voice, idempotency, and direct posting. Use this skill for read-only GitHub inspection, command syntax, searches, workflow operations, codespaces, releases, configuration, and other GitHub automation.
Authority
- Read and inspect without confirmation.
- Execute reversible or ordinary GitHub writes only when the user explicitly requested that outcome.
- Never delete repositories, releases/assets, workflow runs/caches, secrets/variables, keys, codespaces, extensions, or
gists.
- Label deletion is the sole destructive exception: show the target repo, exact labels, commands, and issue/PR impact,
then require approval in a subsequent message before gh label delete ... --yes.
- Route repository renames through
repo-renameso GitHub and local continuity change together.
Workflow
- Resolve the repository explicitly when cwd is ambiguous. Let the first required read-only command validate
authentication; run gh auth status only for auth diagnosis.
- Inspect
gh --helpfor the installed version before relying on flags or JSON fields. Prefer
--json plus --jq for machine-readable results.
- Load only the relevant reference:
| Task | Reference | | --------------------------------------------------------- | ------------------------------------ | | Workflow runs, checks, logs | references/workflows-actions.md | | Releases | references/releases.md | | Search | references/search.md | | JSON fields and jq | references/json-output.md | | Labels | references/labels.md | | Codespaces | references/codespaces.md | | Discussions syntax (not authored contribution workflow) | references/discussions.md | | Gists | references/gists.md | | Aliases, API, extensions, org/projects, secrets, rulesets | references/advanced-features.md | | Reusable automation patterns | references/automation-workflows.md | | Failures and auth/rate limits | references/troubleshooting.md |
- Preview commands that have broad write scope. After a requested write, fetch the resulting resource and report its
URL or stable identifier.
Completion requires the requested GitHub state or data plus command/output evidence. On a partial or ambiguous write failure, check whether the resource changed before retrying.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: PaulRBerg
- Source: PaulRBerg/dot-agents
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.