gh

Manage GitHub repositories, CLI operations, and Actions workflows securely.

1|Updated Mar 20, 2026
One-click install
npx skills add https://github.com/kaynetik/skills --skill gh-kaynetik
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: gh
Source: https://github.com/kaynetik/skills/tree/main/gh
Command: npx skills add https://github.com/kaynetik/skills --skill gh-kaynetik

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Helps developers and reviewers author, audit, and operate GitHub repositories and Actions workflows with secure defaults and practical CLI usage, reducing misconfigurations, leaked secrets, and brittle CI runs.

Core Features & Use Cases

  • Workflow hardening: Guidance on minimal permissions, secrets handling, pull_request_target risks, and pinning third-party actions to reduce supply-chain risk.
  • gh CLI operations: Reference for repo/PR/issue/run/secret commands and machine-friendly output for automation.
  • Performance & maintainability: Patterns for caching, concurrency, path filters, and splitting workflows for clarity and cost control.

Quick Start

Use the gh skill to review a repository's .github/workflows YAML for least-privilege permissions, secrets safety, and pinned action usage.

Frequently Asked Questions about gh

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure GitHub Actions workflows against script injection and leaked secrets?

Audit .github/workflows YAML to enforce least-privilege tokens, prevent untrusted input exposure, and pin third-party actions. This reduces misconfigurations, prevents script injection, and lowers supply-chain risk.

What is the best way to use gh CLI commands for automating PR and issue workflows?

Use gh CLI commands for repos, issues, PRs, runs, and secrets while preferring machine-readable output. This ensures consistent automation and practical management of GitHub repository operations without brittle scripts.

How do I review GitHub Actions YAML for least-privilege permissions and secrets safety?

Review GitHub Actions YAML by checking for minimal permissions, verifying secrets handling, and ensuring pinned action usage. This workflow hardening prevents unauthorized access and secures CI pipelines against supply-chain attacks.

Can I use gh CLI to manage GitHub repository secrets and actions securely?

Yes, you can use gh CLI to manage repository secrets and actions securely. It provides commands for secrets, runs, and APIs, enforcing least-privilege tokens and consistent operations across your GitHub repositories.

What patterns help improve GitHub Actions performance and maintainability?

Improve GitHub Actions performance by applying patterns for caching, concurrency, path filters, and splitting workflows. These practices control CI costs, increase clarity, and maintain reproducible automation runs.