gh-cli

by trailofbits7.6k

Enforces authenticated gh CLI workflows over unauthenticated curl, WebFetch, and MCP fetch patterns. Use when working with GitHub URLs, API access, pull requests, or issues.

Install

The skill file stays in the publisher's repository.

Paste the copied command in a terminal. It installs this SKILL.md into that agent.

npx skills add trailofbits/skills --skill gh-cli -a cursor -y

Download skill plugins/gh-cli/skills/gh-cli/SKILL.md on GitHub

Related skills

View all

S
skillsTrail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
P
post-patch-validation>
R
review-walkthroughGenerates an interactive HTML walkthrough for reviewing code changes. Use only when explicitly called.

Questions

How do I install gh-cli?: Download plugins/gh-cli/skills/gh-cli/SKILL.md from the publisher, or copy the path and open the repository. PlugMCP lists the skill and does not host the file.
Where does gh-cli live?: The publisher keeps it at https://github.com/trailofbits/skills.
Which agents can use gh-cli?: Claude, Cursor, and Codex can read a SKILL.md you add from the publisher's repository.

name: gh-cli description: Enforces authenticated gh CLI workflows over unauthenticated curl, WebFetch, and MCP fetch patterns. Use when working with GitHub URLs, API access, pull requests, or issues.

gh-cli

When to Use

Working with GitHub repositories, pull requests, issues, releases, or raw file URLs.
You need authenticated access to private repositories or higher API rate limits.
You are about to use curl, wget, WebFetch, or an MCP fetch tool against GitHub.

When NOT to Use

The target is not GitHub.
Plain local git operations already solve the task.

Install

Related skills

Questions

name: gh-cli description: Enforces authenticated gh CLI workflows over unauthenticated curl, WebFetch, and MCP fetch patterns. Use when working with GitHub URLs, API access, pull requests, or issues.

gh-cli

When to Use

When NOT to Use

Guidance