Complete GitHub Integration

VerifiedCaution

This skill provides complete GitHub API integration for managing repositories, issues, pull requests, Actions workflows, and security alerts. It helps automate Git workflows directly from the AI coding assistant. Use it when you need to interact with GitHub programmatically without switching contexts.

Sby Skills Guide Bot
DevelopmentIntermediate
1406/2/2026
Claude Code
#github#repository-management#pull-requests#github-actions#code-security

Recommended for

Our review

Complete GitHub API integration for managing repositories, issues, pull requests, Actions workflows, and code security within Claude Code.

Strengths

  • Unified interface for a wide range of GitHub operations (repos, issues, PRs, Actions, security).
  • Dedicated scripts with JSON, markdown, or minimal output formats, easing analysis.
  • Built-in decision tree to guide users to the correct reference.
  • Quick authentication and rate limit checks.

Limitations

  • Requires a GITHUB_TOKEN environment variable with appropriate scopes, which can be a setup hurdle.
  • Advanced operations (e.g., detailed code review) are not covered.
  • Depends on external Python scripts, limiting portability.
When to use it

Use this skill when you need to automate recurring GitHub tasks like creating PRs, managing issues, or triggering CI workflows.

When not to use it

Avoid it for very simple operations (e.g., creating a single file) that can be done directly through the GitHub web interface.

Security analysis

Caution
Quality score93/100

The skill provides legitimate GitHub automation using Bash and a required token. While it does not contain destructive or exfiltrating instructions directly, the token and script execution pose a risk if an AI is tricked into misusing them. The token scopes include repo and workflow, enabling significant changes, so caution is advised.

Findings
  • Requires GITHUB_TOKEN environment variable, which grants broad repository access
  • Uses Bash to execute Python scripts, which could be manipulated if prompt is compromised
  • Powerful operations like merging PRs, triggering workflows, and updating code are possible with the supplied token

Examples

Create a Pull Request
Create a pull request from branch 'feature/new-login' to 'main' in the repository my-org/my-app with title 'Add new login flow' and description 'Implements OAuth2 authentication.'
List Open Issues
List all open issues labeled 'bug' in the repository my-org/my-app, sorted by newest first.
Trigger a GitHub Actions Workflow
Trigger the 'CI' workflow on the repository my-org/my-app using the 'main' branch and pass the input 'deploy=true'.

name: github description: >- Complete GitHub integration for repositories, issues, PRs, workflows, and security. Use when working with GitHub: (1) Repository operations - get/create files, branches, search code, (2) Issue management - list, create, update, comment on issues, (3) Pull requests - create, review, merge PRs, check CI status, (4) GitHub Actions - list workflows, view runs, download logs, trigger workflows, (5) Code security - Dependabot alerts, code scanning, secret scanning. Requires GITHUB_TOKEN environment variable with appropriate scopes. allowed-tools:

  • Bash
  • Read

GitHub Integration

Complete GitHub API integration for Claude Code. All operations require the GITHUB_TOKEN environment variable.

Quick Start

Verify authentication:

python scripts/github_client.py --check-auth

Check rate limits:

python scripts/github_client.py --rate-limit

Operation Reference

Choose your operation and load the appropriate reference file for detailed usage.

| Task | Reference File | Common Operations | |------|----------------|-------------------| | Repository/Files | repos.md | Get files, create/update files, branches, fork | | Issues | issues.md | List, create, update, comment, labels | | Pull Requests | pull-requests.md | Create, review, merge, check status | | GitHub Actions | actions.md | List runs, view logs, rerun, trigger | | Security | code-security.md | Dependabot, code scanning, secrets | | Search | search.md | Search repos, code, issues, users | | Troubleshooting | api-patterns.md | Error handling, rate limits, patterns |

Decision Tree

What do you need to do?
│
├── Work with files or code?
│   └── Read references/repos.md
│       - Get file contents
│       - Create/update files
│       - Create branches
│       - Fork repositories
│
├── Manage issues?
│   └── Read references/issues.md
│       - List/filter issues
│       - Create issues
│       - Update status/labels
│       - Add comments
│
├── Work with pull requests?
│   └── Read references/pull-requests.md
│       - Create PRs
│       - Review/approve
│       - Check CI status
│       - Merge PRs
│
├── GitHub Actions / CI?
│   └── Read references/actions.md
│       - List workflow runs
│       - View/download logs
│       - Rerun failed jobs
│       - Trigger workflows
│
├── Security alerts?
│   └── Read references/code-security.md
│       - Dependabot alerts
│       - Code scanning
│       - Secret scanning
│
└── Search GitHub?
    └── Read references/search.md
        - Search repositories
        - Search code
        - Search issues/PRs
        - Search users

All Scripts Support --help

Run any script with --help to see full usage:

python scripts/repos.py --help
python scripts/issues.py --help
python scripts/pull_requests.py --help
python scripts/search.py --help
python scripts/actions.py --help
python scripts/code_security.py --help

Output Formats

All scripts support --format:

  • json (default) - Full JSON output
  • markdown - Human-readable format
  • minimal - Compact JSON

Required Token Scopes

| Operation | Required Scopes | |-----------|-----------------| | Repositories (public) | public_repo | | Repositories (private) | repo | | Issues & PRs | repo | | GitHub Actions | workflow | | Code Security | security_events | | Search Code | Authentication required |

Related skills