Skip to content
Back to skills

Acquire Github Workspace

ASecurity

Prepare an isolated GitHub fork and exact issue branch before implementation. Use for the Solve workspace-acquisition phase, fork validation, upstream synchronization, credential-safe cloning, branch naming, or workspace confinement.

  • 85 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 3, 2026
devopsshellgit

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 3, 2026

npx -y skills add elixpo/elixpo_chapter --skill acquire-github-workspace --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Acquire Github Workspace?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Acquire Github Workspace
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/elixpo-acquire-github-workspace/badge)](https://www.skillsdirectory.com/skills/elixpo-acquire-github-workspace)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: acquire-github-workspace
description: Prepare an isolated GitHub fork and exact issue branch before implementation. Use for the Solve workspace-acquisition phase, fork validation, upstream synchronization, credential-safe cloning, branch naming, or workspace confinement.
---

# Acquire GitHub Workspace

Accept only the exact URL approved by Vet. In production, require the matching
Pick and ledger claim. In owned-test mode, require an allowlisted repository,
matching test-mode Vet approval, and GitHub-reported push permission.

Resolve the authenticated fork owner. Reuse an existing repository only after
verifying its parent/source is the target; otherwise create the fork and wait a
bounded time for readiness. Never overwrite an unrelated same-named repository.

Create one fresh isolated directory. Clone the fork without tags, add the source
as `upstream`, fetch the upstream default branch, and create exactly one new
natural branch from the fetched commit: `feat/<issue-slug>-<number>-<hex>` for
feature signals or `patch/<issue-slug>-<number>-<hex>` otherwise. Configure the
bot identity locally.

Pass authentication through process environment, never URLs, prompts, logs, or
command arguments. Use argument-vector subprocesses without a shell. Do not
push, modify upstream, delete an existing workspace, reuse a dirty workspace,
or create a pull request during acquisition.

Record upstream, fork, base branch, work branch, workspace, issue, and test mode
in bounded state. Fail once on permission, fork, clone, fetch, or checkout error.

Files in this skill

  • SKILL.md1.5 KB
  • agents/openai.yaml217 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.