Skip to content
Back to skills

Github

ASecurity

Inspect repositories, review pull requests, triage issues, and follow CI through the GitHub MCP server.

  • 113 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added September 2, 2026
ai-agentsgoshellgitapi

Works with

  • api
  • mcp

Security analysis

A100/100

Scanned September 2, 2026

npx -y skills add SDSLeon/lightcode --skill github --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Github?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Github
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/sdsleon-github/badge)](https://www.skillsdirectory.com/skills/sdsleon-github)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: github
description: "Inspect repositories, review pull requests, triage issues, and follow CI through the GitHub MCP server."
---

# GitHub

Work with GitHub through the connected `github` MCP server. Prefer its tools over shelling out to `gh` or `git` —
they return structured data and work without a local checkout.

Use this core skill to orient the repository and route the request. Use `review-follow-up` for review threads,
`ci-debug` for failing Actions checks, and `publish-changes` for commit/push/PR work. Do not blend a read-only
inspection request into a publishing workflow.

## Before you start

Confirm the server is connected. If its tools are unavailable, say so and stop rather than silently falling back to
guesswork; the user connects it from **Settings → Plugins → GitHub**.

Establish the target repository once, from the user's words or the current project's `origin` remote, and reuse it.
Do not guess an owner or repo name.

## Reading

- Read the pull request or issue body **and** its comments before forming an opinion. Review threads carry the
  decisions; the description is often stale.
- For a PR, read the diff before the discussion. Someone's summary of a change is not the change.
- Quote file and line when you reference code, so the user can jump to it.
- Resolve repository, pull request, issue, check, and ref identifiers once and reuse the exact identifiers. If more
  than one target plausibly matches, ask rather than acting on the first search result.

## Writing

Anything that other people will see — a comment, a review, a label change, a merge — is outward-facing. Confirm the
exact text and target with the user before posting, unless they have already told you to go ahead. Approval to post one
comment is not approval to post the next one.

Never merge, close, or force-push on the user's behalf without them asking for that specific action.

## Reporting

Give the answer, not a transcript of your API calls. When you list PRs or issues, include number, title, author, and
current state, and lead with whatever the user actually asked about.

For any mutation, read back the resulting GitHub state and link the exact repository object. A successful tool call
without the expected state is not verification.

## Related skills

`review-follow-up` for working through review feedback, `ci-debug` for failing checks, `publish-changes` for
committing and opening a PR.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.