Github CLI Complete
v1.0.0Complete skill for operating GitHub CLI (gh) on cli-trunk: full command map, subcommands, usage patterns, JSON output, and practical workflows for Issues, PR...
⭐ 0· 66·0 current·0 all-time
byiroaK@iiroak
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (complete gh CLI guidance) align with the SKILL.md content: command maps, workflows, installation, and auth for gh are present and expected.
Instruction Scope
The instructions include installation commands (sudo apt/dnf/zypper, wget) and examples of auth flows (interactive gh auth login and exporting GH_TOKEN/GITHUB_TOKEN). These are within the skill's scope, but the SKILL.md references environment variables (GH_TOKEN, GITHUB_TOKEN, GH_ENTERPRISE_TOKEN) and privileged commands even though the package metadata declares no required env vars — that mismatch is informational rather than malicious.
Install Mechanism
There is no formal install spec in the registry (instruction-only). The SKILL.md recommends installing gh from official sources (cli.github.com packages or GitHub releases), which is appropriate and standard.
Credentials
The env vars the instructions mention (GH_TOKEN/GITHUB_TOKEN and enterprise equivalents) are directly relevant to GitHub CLI usage. However, the registry metadata does not list any required env vars; users should note the skill expects tokens may be used for non-interactive automation.
Persistence & Privilege
The skill does not request persistent or platform-wide privileges (always:false). It is instruction-only and does not claim to modify other skills or system-wide agent settings.
Assessment
This SKILL.md is coherent for teaching and automating the GitHub CLI. Before installing or using it: (1) be aware the instructions include sudo package-manager commands and adding apt/rpm repos — these require administrative privileges and will modify system package config; (2) the skill references GH_TOKEN/GITHUB_TOKEN (and enterprise tokens) for non-interactive use — only provide tokens with minimal scopes and prefer interactive login when possible; (3) the install sources cited are the official GitHub CLI hosts (cli.github.com / GitHub releases) — verify URLs before running; (4) the registry metadata does not explicitly declare required env vars, so don't assume the skill will manage or protect any secrets you provide. Overall this appears to do what it says, but exercise standard caution when installing packages and supplying tokens.Like a lobster shell, security has layers — review code before you run it.
latestvk97djqagt3cy9em39abvhxmcj184jz14
License
MIT-0
Free to use, modify, and redistribute. No attribution required.