gh-cli — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited gh-cli (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A plugin that intercepts GitHub URL fetches and redirects Claude to use the authenticated gh CLI instead.
Claude Code's WebFetch tool and Bash curl/wget commands don't use the user's GitHub authentication. This means:
This plugin provides PreToolUse hooks that intercept GitHub URL access via WebFetch or curl/wget, and suggest the correct gh CLI command.
| Tool | Pattern | Suggestion |
|---|---|---|
WebFetch | github.com/{owner}/{repo} | gh repo view owner/repo |
WebFetch | github.com/.../blob/... | gh repo clone + Read |
WebFetch | github.com/.../tree/... | gh repo clone + Read/Glob/Grep |
WebFetch | api.github.com/repos/.../pulls | gh pr list / gh pr view |
WebFetch | api.github.com/repos/.../issues | gh issue list / gh issue view |
WebFetch | api.github.com/... | gh api <endpoint> |
WebFetch | raw.githubusercontent.com/... | gh repo clone + Read |
Bash | curl https://api.github.com/... | gh api <endpoint> |
Bash | curl https://raw.githubusercontent.com/... | gh repo clone + Read |
Bash | wget https://github.com/... | gh release download |
*.github.io)gh (except anti-patterns)git clone, git push, etc.)grep, rg, etc.)gh) must be installed and authenticated (gh auth login)gh is not installed, the hooks pass through without disruptionThis skill operates automatically via hooks. No manual invocation required. When you attempt to access GitHub URLs, the hooks will intercept and suggest the authenticated alternative.
# View repo info
gh repo view owner/repo
# List PRs
gh pr list --repo owner/repo
# View a specific PR
gh pr view 123 --repo owner/repo
# API access
gh api repos/owner/repo/pulls
# Clone a repo
gh repo clone owner/repo~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.