The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/check_protections.py script executes the GitHub CLI (gh) to perform read-only audits of repository configurations. The script uses list-based arguments for subprocess.run, which is a safe execution pattern that prevents shell injection.
[EXTERNAL_DOWNLOADS]: The skill relies on the GitHub CLI (gh), which is an official and trusted tool from a well-known service provider. It does not download any unverified third-party scripts or binaries.
[SAFE]: The skill follows and promotes established security best practices, including recommending repository rulesets over legacy branch protections, enforcing SHA-pinning for GitHub Actions, and requiring human review for automated dependency updates.

repo-protections