Skip to content
Back to skills

gh-aw Prompt Surface

ASecurity

This repository builds **gh-aw** (GitHub Agentic Workflows), a GitHub CLI extension for writing workflows in markdown and compiling them to GitHub Actions.

  • 5,344 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added May 26, 2026
ai-agentsbashgit

Works with

  • cli
  • mcp

Security analysis

A100/100

Pro scans all 21 files and shows the line behind each finding

Scanned May 27, 2026

npx -y skills add github/gh-aw --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of gh-aw Prompt Surface?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for gh-aw Prompt Surface
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/github-gh-aw-prompt-surface/badge)](https://www.skillsdirectory.com/skills/github-gh-aw-prompt-surface)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
# gh-aw Prompt Surface

This repository builds **gh-aw** (GitHub Agentic Workflows), a GitHub CLI extension for writing workflows in markdown and compiling them to GitHub Actions.

## What this surface does

- Converts markdown workflow specs (`.md`) into compiled lock files (`.lock.yml`)
- Supports multiple AI engines (`copilot`, `claude`, `codex`, `custom`)
- Integrates tools, including GitHub MCP servers and safe-output tooling
- Provides CLI commands to compile, run, inspect, and audit workflows

## Key concepts

1. **Workflow compilation**: edit workflow markdown, then recompile lock files
2. **Engine selection**: set `engine` in frontmatter to control runtime agent behavior
3. **MCP tools**: configure GitHub/MCP toolsets in frontmatter for repository operations
4. **Safe outputs**: workflow-safe issue/comment output paths and constraints

## Representative usage examples

```bash
# Compile markdown workflows to lock files
gh aw compile

# Run a workflow manually
gh aw run .github/workflows/daily-skill-optimizer.md

# Inspect MCP server usage in workflows
gh aw mcp list
gh aw mcp inspect daily-skill-optimizer

# Audit a workflow run
gh aw audit 24814681146
```

## Where to learn more in this repo

- `/AGENTS.md` for development/agent workflow conventions
- `/skills/*/SKILL.md` for focused domain guidance (GitHub MCP, docs, errors, etc.)

Files in this skill

  • .architecture.yml398 B
  • .changeset/1773446645-configure-gh-for-ghe.md508 B
  • .changeset/README79 B
  • .changeset/minor-add-cli-proxy-feature-flag.md293 B
  • .changeset/minor-add-concurrency-queue-support.md156 B
  • .changeset/minor-auto-hoist-run-expressions-codemod.md524 B
  • .changeset/minor-decouple-status-comment.md830 B
  • .changeset/minor-disable-agent-sandbox-only.md598 B
  • .changeset/minor-enable-reaction-status-comment-by-default.md501 B
  • .changeset/minor-mcp-gateway-otlp-headers-string-only.md590 B
  • .changeset/minor-otlp-headers-env-var.md1.6 KB
  • .changeset/minor-preserve-branch-name-in-safe-outputs.md426 B
  • .changeset/minor-rename-app-to-github-app.md702 B
  • .changeset/minor-rename-llmgateway-port.md935 B
  • .changeset/minor-rename-safe-inputs-to-mcp-scripts.md263 B
  • .changeset/minor-update-mcpg-v0-1-5.md1.1 KB
  • .changeset/patch-activation-activation-artifact.md207 B
  • .changeset/patch-activation-github-token-config.md196 B
  • .changeset/patch-activation-info.md242 B
  • .changeset/patch-add-audit-diff-command.md290 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.