The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The scripts/setup_gh.py script fetches the GitHub CLI binary from the official GitHub Releases page. It implements security best practices by verifying the download against SHA256 checksums provided in the release metadata.
[COMMAND_EXECUTION]: The skill executes shell commands using the subprocess module to interact with the GitHub CLI. In scripts/setup_gh.py, it runs the binary with the --version flag to verify installation. In scripts/github_project_setup.py, it executes gh api graphql to perform project management operations. These commands are executed using argument lists rather than shell strings, which follows security best practices to prevent command injection.
[DATA_EXFILTRATION]: No unauthorized data exfiltration was detected. The scripts utilize the GITHUB_TOKEN environment variable to authenticate with GitHub's official APIs, which is the standard and intended mechanism for the skill's GitHub integration functionality.

gh