The Agent Skills Directory

[SAFE]: The skill uses the official gh (GitHub CLI) for all operations, which is a standard and recommended tool for GitHub automation.
[SAFE]: The upsert_comment.py script performs a specific, documented task of creating or updating GitHub comments using a marker to avoid duplicates. It uses subprocess.run without shell=True to invoke the legitimate gh binary.
[SAFE]: Instructions correctly emphasize security best practices, such as not printing tokens, using --json for robust parsing, and validating head commits before merging to prevent race conditions or shipping unreviewed code.
[SAFE]: Test scripts use a mock gh implementation in a temporary directory to verify the logic of the upsert script without making actual network calls.

triage-github-prs-and-issues