GitHub发布

GitHub发布技能。使用浏览器网页方式推送代码。

Security Scan

Instructions and requirements are consistent with a browser-based GitHub publishing helper; nothing requested is disproportionate, but the README and SKILL.md slightly disagree about using git vs. the browser UI and you should avoid uploading secrets.

Purpose & Capability

Skill name/description say 'publish to GitHub via browser' and the SKILL.md only instructs browser UI actions (open https://github.com/new, create repo, upload files). No env vars or binaries are requested, which is proportionate. Minor inconsistency: README.md mentions initializing Git, adding remotes and pushing (CLI workflow) while SKILL.md describes purely browser operations — this is likely benign but worth clarifying.

Instruction Scope

Runtime instructions are limited to browser-based GitHub actions (create repo, upload files, commit). They do not instruct reading unrelated system files or exfiltrating data, nor do they reference environment variables or external endpoints beyond github.com. They do assume the browser is already logged into the intended GitHub account.

Install Mechanism

Instruction-only skill with no install spec and no code files — nothing is downloaded or written to disk by the skill bundle itself, which is low-risk.

Credentials

The skill declares no required credentials or env vars; it only requires an authenticated browser session. That is proportionate to a web-UI publishing workflow. There are no unexplained secret requests.

Persistence & Privilege

always is false and there is no install-time persistence requested. The skill uses the browser tool but does not request system-wide configuration or other skills' credentials.

Assessment

This skill is coherent for publishing code using a browser UI: it expects the browser tool to be able to open GitHub and that the browser is already logged into the correct account. Before using it: (1) clarify whether you intend to use the web UI or the git CLI since README and SKILL.md disagree; (2) never upload secrets (API keys, credentials, private keys) — creating a Public repo will make content visible to everyone; (3) confirm the agent/browser has access only to the files you intend to publish; (4) if you don't want the agent to autonomously publish on your behalf, keep model-invocation and user-invocation controls in mind (the skill can be invoked by the agent if allowed). If you need stronger assurances, request a version that documents exactly how local files are selected and confirms it will not publish private data.

GitHub发布 Skill

概述

通过浏览器网页方式推送代码到GitHub。

触发方式

• "发布到GitHub"
• "推送到GitHub"

发布流程

步骤1：打开发布页面

• 打开 https://github.com/new

步骤2：创建仓库

• 填写仓库名
• 选择Public
• 点击Create repository

步骤3：上传文件

• 在仓库页面点击上传文件
• 选择本地文件或拖拽文件
• 填写提交信息
• 点击Commit changes

步骤4：后续更新

• 打开发布的仓库
• 点击上传文件
• 上传新文件覆盖
• 填写提交信息
• 点击Commit changes

关键点

• 使用浏览器网页操作，不需要git命令行
• 浏览器已登录GitHub账号即可

工具

• browser：浏览器操作