github — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited github (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use gh for day-to-day GitHub operations from the terminal. Prefer read-only commands first, then run mutating commands only after clear user intent.
gh --version
gh auth statusscripts/gh_preflight.sh --repo owner/repo-R owner/repo to commands.--json with --jq or --template for automation-friendly output.github.com by default), repository, and branch.scripts/gh_preflight.sh before multi-step operations.list, view, and status subcommands before changing anything.gh repo viewgh repo clone owner/repogh repo creategh repo set-default owner/repogh pr listgh pr view <number>gh pr checkout <number>gh pr creategh pr review <number> --approve|--request-changes|--commentgh pr merge <number>gh issue listgh issue view <number>gh issue creategh issue comment <number> --body "..."gh issue close <number>gh workflow listgh workflow run <workflow>gh run listgh run watch <run-id>gh run view <run-id> --loggh release listgh release view <tag>gh release create <tag> [assets...]gh release upload <tag> <file>gh api repos/{owner}/{repo}/pulls --paginateFor broader command coverage, read references/command-map.md.
gh pr create|merge|close|reopen|readygh issue create|edit|close|reopen|deletegh repo create|edit|archive|deletegh release create|edit|deletegh secret set|deletegh variable set|deletegh workflow run--delete-branch, force flags) unless explicitly requested.Use JSON output when parsing or summarizing results:
gh pr list --json number,title,url --jq '.[] | "\(.number)\t\(.title)\t\(.url)"'
gh issue list --json number,title,labels --template '{{range .}}{{printf "#%v %v\n" .number .title}}{{end}}'gh auth login or gh auth refresh.gh auth status --hostname github.com, then gh auth switch.gh <command> <subcommand> --help.https://cli.github.com/manual/.scripts/gh_preflight.sh: Check gh availability, auth status, and repository context.references/command-map.md: Command map for repo, PR, issue, actions, release, and API operations.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.