What problem does it solve? Agents that need to act on GitHub programmatically often guess REST payloads, mutate global gh auth state, or hand-roll secret encryption. This Skill provides a disciplined, CLI-first workflow for performing any GitHub operation with per-call token authentication and no global state changes. ## Core Features & Use Cases - CLI-first operation routing: Scan a bundled command index to prefer first-class gh commands (issues, PRs, repos, releases, secrets, Actions runs) and fall back to gh api or gh api graphql only where no command exists. - Per-call authentication: Every invocation uses GH_TOKEN from a caller-injected variable name, never running gh auth switch and never printing the token value. - OpenAPI-driven REST fallback: A bundled GitHub OpenAPI spec plus a Python $ref-resolver script produces exact endpoint parameters, request bodies, and gh api call skeletons for the REST long tail. - Use Case: Ask the agent to create an issue, set an encrypted repository secret, and query repo traffic views; it picks gh issue create, gh secret set, and a resolved gh api call respectively, all authenticated per-call. ## Quick Start Use github-cli-ops to create an issue titled "Bug: login timeout" in my repository and list the open pull requests.