Github 1.0.0

• Risk level: Low
• Analyzed: Feb 22, 2026, 9:32 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill is internally coherent: it provides instructions to use the GitHub `gh` CLI (read/write-capable) and requests no extra credentials or installs, though the metadata omits that the `gh` binary is required.

This skill is essentially a set of examples for using the `gh` CLI. Before installing: 1) Ensure the `gh` CLI is installed and from a trusted source—the skill does not provide an install step. 2) Be aware that any commands run will use your local `gh` authentication (personal access token or gh auth), so the agent will act with those GitHub permissions; avoid enabling this skill for untrusted agents or accounts with broad repo/org access. 3) The SKILL.md shows mostly read-only examples, but `gh api` and other `gh` commands can make destructive changes if invoked—consider limiting which agent actions are allowed. 4) It would be better if the skill metadata declared `gh` as a required binary and documented expected permission scopes; ask the publisher to add that for clarity.