gh-ghtkn-guard

Interactively set up, verify, update, or uninstall gh-ghtkn-guard for Claude Code, Codex, or similar coding-agent users so gh uses ghtkn-backed GitHub App User Access Tokens without exposing GH_TOKEN in the agent shell. Use when a user asks to set up the safer gh wrapper, distribute it to a machine, fix agent PATH issues for gh, or revert the wrapper.

Day-to-day rules for invoking `gh` from a coding agent (Claude Code, Codex, or similar) on a machine where `gh` is overridden by `gh-ghtkn-guard`. Covers the wrapper's runtime semantics (per-call ghtkn token injection, blocked write-likely `gh api`, blocked `gh auth token`), the agent OS sandbox interaction (top-level-`gh` rule for `excludedCommands`), authenticated multi-line body submission for `gh issue comment` / `gh pr comment` / `gh pr review`, and the supported 3-step flow for downloading images embedded in an Issue or PR body/comment via the rendered `body_html` and its JWT-signed `private-user-images.githubusercontent.com` URLs. Also documents when (and when not) to extend the wrapper with a new subcommand. Setup, install, and PATH wiring belong to the `gh-ghtkn-guard-setup` skill — this skill assumes the wrapper is already installed. Trigger when the agent is about to call `gh` for the first time in a session, when `gh api` was blocked, when `gh auth status` shows `The token in GH_TOKEN is invalid`,