Gh

• Risk level: Low
• Analyzed: Apr 16, 2026, 4:29 AM
• Findings: 0
• Version: 1.1.0

Overview

The skill is an instruction-only wrapper around the GitHub CLI (gh) and its requested actions and scope match its stated purpose, with only a minor omission (it doesn't declare 'gh' as a required binary).

This skill is a set of instructions for using the GitHub CLI and appears to do what it says. Before installing: ensure you have the gh CLI installed and authenticated (the skill does not declare this dependency); review and approve any destructive commands (delete, force-push, repo creation with the wrong visibility), and be aware that running the skill will use your existing gh credentials (it can act with whatever GitHub permissions your gh auth has). Because this is instruction-only (no code to audit), make sure the agent will only run the specific commands you intend and avoid granting it broad autonomous rights if you are uncomfortable with it acting on your repos without manual approval.