wip-repo-permissions-hook

Enforce private repository requirements before making repositories public.

3|Updated Feb 28, 2026
One-click install
npx skills add https://github.com/wipcomputer/wip-ai-devops-toolbox --skill wip-repo-permissions-hook
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: wip-repo-permissions-hook
Source: https://github.com/wipcomputer/wip-ai-devops-toolbox/tree/main/tools/wip-repo-permissions-hook
Command: npx skills add https://github.com/wipcomputer/wip-ai-devops-toolbox --skill wip-repo-permissions-hook

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires @wipcomputer/wip-repo-permissions-hook, @modelcontextprotocol/sdk, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill prevents accidental exposure of sensitive internal development context by ensuring that public repositories always have a corresponding private repository.

Core Features & Use Cases

  • Visibility Enforcement: Automatically blocks attempts to make a repository public if a -private counterpart does not exist.
  • Audit Capabilities: Allows for auditing all public repositories within an organization to ensure compliance with the private counterpart rule.
  • Use Case: Before pushing a new feature branch to a public repository, this tool ensures that the corresponding -private repository exists, safeguarding internal notes, plans, and AI development artifacts.

Quick Start

Use the wip-repo-permissions skill to check if the repository wipcomputer/my-cool-project can be made public.

Frequently Asked Questions about wip-repo-permissions-hook

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent accidental public exposure of internal GitHub repository context?

To prevent accidental public exposure of internal GitHub repository context, this skill enforces a policy requiring a corresponding '-private' repository to exist before any repository can be made public, safeguarding internal development context.

How do I audit all public repositories in an organization for private counterpart compliance?

To audit public repositories for compliance, use the provided CLI commands to check individual repositories and audit entire organizations, ensuring every public repository has a required '-private' counterpart.

Can I integrate repository visibility checks as a hook into Claude Code or OpenClaw?

Yes, you can integrate repository visibility checks as a hook into AI development platforms like Claude Code and OpenClaw. It automatically blocks making a repository public if the '-private' counterpart does not exist.

Does this MCP tool support programmatic access for checking repository permissions?

Yes, the tool exposes its repository visibility enforcement functionality via MCP, allowing programmatic access to check if a repository can be made public based on the '-private' counterpart rule.

What happens if I try to make a GitHub repository public without a private counterpart?

If you try to make a GitHub repository public without a private counterpart, the visibility enforcement mechanism automatically blocks the attempt. This strict policy ensures internal development context is never accidentally exposed.

Why do I need a '-private' repository before making a repo public?

You need a '-private' repository before making a repo public to safeguard internal development context, such as internal notes, plans, and AI development artifacts. This separation prevents sensitive information from leaking into public repositories.