SkillAgentSearch skills...

gh

GitHub CLI skill for interacting with GitHub via the gh command line tool

Install / Use

npx skills add bubbuild/bub --skill gh

Installs into whichever agent you are using.

About this skill
📄

SKILL.md

Installable skill definition

Quality Score

86/100

Category

Automation

Supported Platforms

Universal

Our assessment of gh

gh scores 86/100 on our quality scale, 1898th of 2,891 Automation skills we index.

Its SKILL.md is 3.1 KB long, well organised into 10 sections with 9 code examples: a solid amount of guidance for an agent.

With 1,686 GitHub stars, it is one of the more widely adopted skills in the catalogue.

Substance
26/30
Structure
20/20
Description
12/15
Adoption
14/20
Freshness
15/15

Maintenance, license and trust

  • The repository was last updated 6 days ago, so gh is actively maintained.
  • It is released under the Apache-2.0 license, a permissive license that allows use, modification and commercial use with attribution.
  • Its trust signals score 100/100, with no cautions. These come from repository metadata, not a code audit — read the skill file before letting an agent act on it.

Safety scan

No issues found

Our scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands.

Automated pattern scan on 2026-10-25. It catches known dangerous patterns, not every risk — read a skill before letting an agent act on it.

gh compared with similar skills

All 4 of these similar skills score higher than gh; compare them before choosing.

SkillScoreStarsUpdatedFormat
gh (this skill)by bubbuild861.7k6d agoSKILL.md
Agent-Reachby Panniantong100101.7k1d agoCLAUDE.md
Scraplingby D4Vinci10089.4k2d agoMCP Server
rufloby ruvnet10079.1ktodayMCP Server
algorithmic-artby anthropics100177.9k32d agoSKILL.md

Frequently asked questions

How do I install gh?
Run npx skills add bubbuild/bub --skill gh. The install tabs above show the steps for each supported agent.
Which AI agents does gh work with?
It is written for Universal, as a SKILL.md file. Other agents that read the same format can often use it too.
Is gh safe to use?
Our scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. It is Apache-2.0-licensed and scores 100/100 on trust signals. Skills are instructions an agent will follow, so read the file before installing it and do not approve commands you do not understand.
Is gh still maintained?
The repository was last updated 6 days ago, so gh is actively maintained.

name: gh description: GitHub CLI skill for interacting with GitHub via the gh command line tool. Use when Bub needs to (1) Create, view, or manage GitHub repositories, (2) Work with issues and pull requests, (3) Create and manage releases, (4) Run and monitor GitHub Actions workflows, (5) Create and manage gists, (6) Install and manage agent skills, or (7) Perform any GitHub operations via command line.

GitHub CLI (gh) Skill

Interact with GitHub using the gh command line tool.

Run commands with Bub's bash tool, setting cwd to the target checkout when using local repository context. If it returns a running shell ID, collect the result with bash.output before retrying the command.

Prerequisites

Use the authentication source specified by the user or workspace. For github.com, GH_TOKEN takes precedence over GITHUB_TOKEN, and both override stored gh credentials.

Check authentication:

gh auth status

If not authenticated, report the blocker; do not silently switch credentials. Run interactive login only when the user requests authentication setup:

gh auth login

Repository Operations

gh repo create <name> [--public|--private]
gh repo clone <owner/repo>
gh repo fork <owner/repo>
gh repo view [owner/repo]
gh repo list [owner]

Issue Operations

gh issue create --title "Title" --body "Body"
gh issue list [--state open|closed]
gh issue view <number>
gh issue close <number>
gh issue comment <number> --body "Comment"

Pull Request Operations

gh pr create --title "Title" --body "Body"
gh pr list [--state open|closed]
gh pr view <number>
gh pr checkout <number>
gh pr merge <number>
gh pr review <number> --approve

Release Operations

gh release create <tag> --generate-notes
gh release list
gh release download <tag>
gh release upload <tag> <file>

Workflow Operations

gh workflow list
gh workflow run <name>
gh run list
gh run view <run-id>
gh run watch <run-id>

Gist Operations

gh gist create <file>
gh gist list
gh gist view <id>

Skill Operations

gh skill search <query>
gh skill preview <owner/repo> <skill>
gh skill install <owner/repo> <skill> --dir .agents/skills
gh skill list --dir .agents/skills
gh skill update <skill> --dir .agents/skills --dry-run
gh skill update <skill> --dir .agents/skills --all

gh skill is in preview; check gh skill --help for availability. Run project-scoped commands from Bub's workspace and use --dir .agents/skills; use --dir "$HOME/.agents/skills" for user-scoped skills. Keep gh's source-tracking metadata so installed skills can be updated.

Tips

  • Use --web to open in browser
  • Use -R owner/repo to specify repository
  • Use --json with --jq for scripting
  • Use GH_PROMPT_DISABLED=1 and supply required flags for unattended execution.
  • Write issue, PR, and comment body files as UTF-8 Markdown with real newlines. Pass them with --body-file, or use --body-file - with a quoted heredoc to preserve shell-sensitive text.
  • Use an explicit --head with gh pr create to avoid implicit pushes or forks; the head branch must already exist remotely.

Related Skills

View on GitHub
GitHub Stars1.7k
CategoryAutomation
Updated6d ago
Forks176

Languages

Python

Trust signals

100/100

From repository metadata: license, adoption, age and documentation. Not a code audit — see the Safety scan above for what the skill file itself contains.

No cautions