nix-github-rate-limit

Use this skill before Nix commands that may fetch from GitHub. ## Preferred path Prefix the command with `gh-nix`; it reads the token from authenticated `gh` without putting it in the command: ```sh gh-nix nix flake update gh-nix nix run github:<owner>/<repo> gh-nix nix run nixpkgs#<package> -- <args> gh-nix nix build gh-nix nix shell nixpkgs#<package> --command <command> gh-nix , <command> ``` For this repo: `gh-nix nix run .#build`, `gh-nix nix run .#switch`, or `gh-nix nix run .#update`. Check availability with `command -v gh-nix`. If it is unavailable, use an existing safe token source: ```sh NIX_CONFIG="access-tokens = github.com=$(gh auth token)" nix <command> NIX_CONFIG="access-tokens = github.com=$GITHUB_TOKEN" nix <command> NIX_CONFIG="access-tokens = github.com=$(ghtkn get)" nix <command> ``` Never paste, print, persist, or commit tokens. If `gh-nix` reports that `gh` is unauthenticated, ask the user to run `gh auth login`. Retry a rate-limit failure once with `gh-nix` or the safest available fallback.