| name | github-navigator |
| description | GitHub operations via gh CLI. CRITICAL: Always use instead of WebFetch for ANY github.com URL. Use when user provides GitHub URL, says 'facebook/react', 'show README', 'list issues', 'check PR', 'clone repo', 'analyze this repo', 'understand the architecture', 'how is X structured', 'explore the codebase'. For deep analysis of external repos, clones locally. |
| allowed-tools | Bash(gh:*) Bash(git:clone) Read Glob Grep Task |
| context | fork |
| hooks | {"PostToolUse":[{"matcher":"Bash","hooks":[{"type":"command","command":"python3 scripts/validate-gh-output.py"}]}]} |
GitHub Navigator
Uses gh CLI for all GitHub operations. Teaches discovery pattern via gh --help.
Requirements: gh CLI installed and authenticated.
Core Principle
One pattern for everything:
- Verify gh CLI is installed and authenticated (first use only)
- Identify command domain (files, issues, PRs, releases, etc.)
- Discover usage via
gh <command> --help or gh api --help
- Apply pattern to user's specific request
- Execute with max 2 attempts, then STOP
When to Use
ALWAYS use this skill when:
- User provides a GitHub URL (any
github.com/ link)
- User asks about GitHub repositories, issues, PRs, releases
- User mentions repo paths like "facebook/react"
- User wants GitHub information or operations
Common triggers:
- "Show me the README from facebook/react"
- "List open issues in vercel/next.js"
- "What's in the packages/ directory?"
- "Check latest release for react"
- "View PR #123 in cli/cli"
Deep Analysis Mode
When user wants to understand a codebase deeply (not just fetch a single file), clone the repository locally for comprehensive analysis.
Trigger phrases:
- "analyze this repo"
- "understand the architecture"
- "how is X structured"
- "explore the codebase"
- "give me an overview of"
- "what patterns does X use"
- "how does this project work"
Workflow:
-
Clone to /tmp/github-navigator/<owner>-<repo>/
git clone --depth 1 https://github.com/OWNER/REPO.git /tmp/github-navigator/OWNER-REPO
-
Analyze the codebase:
- Tech stack detection: Look for package.json, go.mod, Cargo.toml, pom.xml, requirements.txt, etc.
- Directory structure: Map out the main directories and their purposes
- Entry points: Find main files, index files, app entry points
- Patterns: Identify architectural patterns (MVC, microservices, monorepo, etc.)
- Key files: README, CONTRIBUTING, docs/, examples/
-
Provide comprehensive summary with:
- Tech stack overview
- Project structure explanation
- Key files and their purposes
- Architectural patterns observed
-
Keep cloned for follow-up questions (user can explore further)
Cleanup:
Repos in /tmp/github-navigator/ are cleaned on system restart. For manual cleanup:
rm -rf /tmp/github-navigator/
Note: Use --depth 1 for faster cloning when full history isn't needed. Use full clone if user needs git history analysis.
Discovery Pattern
Step 0: Verify gh CLI (First Use Only)
Before first use, verify gh CLI is installed and authenticated:
gh --version
gh auth status
If not installed, see Installation.
If not authenticated, run gh auth login for private repos and write operations.
Step 1: Identify Command Domain
| User Request | Command Domain | Primary Command |
|---|
| Fetch file content | Files | gh api repos/OWNER/REPO/contents/PATH |
| List directory | Files | gh api repos/OWNER/REPO/contents/PATH |
| Issues (list, view, create, close) | Issues | gh issue |
| Pull Requests (list, view, diff, merge) | PRs | gh pr |
| Releases (list, view, create) | Releases | gh release |
| Actions/Workflows (runs, logs) | Actions | gh run or gh workflow |
| Repository info (clone, view, fork) | Repo | gh repo |
Step 2: Discover Usage
For files/directories (use gh api):
gh api --help
For everything else (use gh subcommands):
gh issue --help
gh issue list --help
gh pr --help
gh release --help
Step 3: Apply Pattern
Extract usage from help, substitute user's values, execute.
Step 4: Execute with Guardrails
- Max 2 attempts per command pattern
- If fails twice: STOP and report error to user
- Never loop endlessly trying variations
File & Directory Operations
Use gh api for all file operations.
Fetch File Content
gh api repos/OWNER/REPO/contents/PATH -H "Accept: application/vnd.github.raw"
gh api repos/facebook/react/contents/README.md -H "Accept: application/vnd.github.raw"
gh api repos/vercel/next.js/contents/package.json -H "Accept: application/vnd.github.raw"
gh api repos/OWNER/REPO/contents/PATH?ref=BRANCH -H "Accept: application/vnd.github.raw"
gh api repos/facebook/react/contents/package.json?ref=main -H "Accept: application/vnd.github.raw"
Note: If your shell interprets special characters in the URL path (like ?), quote the path appropriately for your environment.
List Directory Contents
gh api repos/OWNER/REPO/contents/PATH
gh api repos/OWNER/REPO/contents/PATH | jq -r '.[] | "\(.type): \(.name)"'
gh api repos/vercel/next.js/contents/packages | \
jq -r 'group_by(.type) | map({type: .[0].type, items: map(.name)}) | .[]'
gh api repos/OWNER/REPO/contents/PATH | jq -r '.[].name'
gh api repos/OWNER/REPO/contents
Get Default Branch
gh api repos/OWNER/REPO --jq .default_branch
Issue Operations
Use gh issue subcommands.
List Issues
gh issue list --repo OWNER/REPO
gh issue list --repo OWNER/REPO --state open
gh issue list --repo OWNER/REPO --state closed
gh issue list --repo OWNER/REPO --state all
gh issue list --repo OWNER/REPO --label bug
gh issue list --repo OWNER/REPO --label "good first issue"
gh issue list --repo OWNER/REPO --limit 10
gh issue list --repo OWNER/REPO --json number,title,state,author
View Issue
gh issue view NUMBER --repo OWNER/REPO
gh issue view NUMBER --repo OWNER/REPO --comments
gh issue view NUMBER --repo OWNER/REPO --json title,body,state,comments
Create Issue (Requires Confirmation)
gh issue create --repo OWNER/REPO --title "Title" --body "Description"
Close Issue (Requires Confirmation)
gh issue close NUMBER --repo OWNER/REPO
Pull Request Operations
Use gh pr subcommands.
List PRs
gh pr list --repo OWNER/REPO
gh pr list --repo OWNER/REPO --state open
gh pr list --repo OWNER/REPO --state closed
gh pr list --repo OWNER/REPO --state merged
gh pr list --repo OWNER/REPO --author USERNAME
gh pr list --repo OWNER/REPO --json number,title,state,author
View PR
gh pr view NUMBER --repo OWNER/REPO
gh pr view NUMBER --repo OWNER/REPO --comments
gh pr view NUMBER --repo OWNER/REPO --json title,body,state,mergeable
View PR Diff
gh pr diff NUMBER --repo OWNER/REPO
gh pr diff NUMBER --repo OWNER/REPO --patch
Check PR Status
gh pr checks NUMBER --repo OWNER/REPO
Merge PR (Requires Confirmation)
gh pr merge NUMBER --repo OWNER/REPO
Release Operations
Use gh release subcommands.
List Releases
gh release list --repo OWNER/REPO
gh release list --repo OWNER/REPO --limit 5
View Release
gh release view TAG --repo OWNER/REPO
gh release view --repo OWNER/REPO
Download Release Assets
gh release download TAG --repo OWNER/REPO
gh release download TAG --repo OWNER/REPO --pattern "*.tar.gz"
Actions/Workflow Operations
Use gh run and gh workflow subcommands.
List Workflow Runs
gh run list --repo OWNER/REPO
gh run list --repo OWNER/REPO --workflow build.yml
gh run list --repo OWNER/REPO --limit 10
View Run Details
gh run view RUN_ID --repo OWNER/REPO
gh run view RUN_ID --repo OWNER/REPO --log
Repository Operations
Use gh repo subcommands.
View Repository Info
gh repo view OWNER/REPO
gh repo view OWNER/REPO --json name,description,stargazersCount,forksCount
Clone Repository
gh repo clone OWNER/REPO
gh repo clone OWNER/REPO target-directory
Fork Repository
gh repo fork OWNER/REPO
gh repo fork OWNER/REPO --clone
Safety Rules
Failure Limits
Maximum 2 attempts per command pattern, then STOP.
- Attempt 1: Run the command as discovered from help
- If fails: Check error message, adjust ONCE
- Attempt 2: Run corrected command
- If fails again: STOP - Report error to user
Destructive Operations
Always confirm before executing:
- Delete or archive operations (
gh repo delete, gh repo archive)
- State changes (
gh pr merge, gh issue close)
- Creating resources (
gh issue create, gh pr create)
- Security operations (
gh secret set, gh workflow run)
- Force flags (
--force, --yes, -y)
Confirmation pattern:
⚠️ This will [ACTION] in [REPO].
Command: [command]
Confirm you want to proceed?
Authentication
Most operations work unauthenticated for public repos. Private repos and write operations require auth.
Check Auth Status
gh auth status
Authenticate
gh auth login
Refresh with Additional Scopes
gh auth refresh -s repo -s workflow -s read:org
Error Handling
Common Errors and Solutions
| Error | Cause | Solution |
|---|
gh: command not found | gh CLI not installed | Install: brew install gh (macOS) |
HTTP 401: Unauthorized | Not authenticated | Run: gh auth login |
HTTP 404: Not Found | Repo doesn't exist or private | Check name, or authenticate |
unknown flag: --xyz | Wrong flag syntax | Check: gh <cmd> --help |
Resource not accessible | Insufficient permissions | Run: gh auth refresh -s repo |
API rate limit exceeded | Too many requests | Authenticate for 5000/hr limit |
Debugging Strategy
When command fails: Read error → check gh <cmd> --help → try once more → report to user if still fails.
DO NOT try multiple blind variations.
Advanced: gh api
For operations not covered by gh subcommands, use gh api directly:
gh api repos/OWNER/REPO
gh api repos/OWNER/REPO/commits
gh api repos/OWNER/REPO/issues/NUMBER --jq '.title,.state'
Prefer standard commands when available - simpler and more reliable.
See REFERENCES.md for GraphQL examples.
Installation
Install: brew install gh (macOS) or see REFERENCES.md. Then: gh auth login
License: MIT | See also: REFERENCES.md