GitHub interactions for issues, PRs, releases, and repository management
npx skills add https://github.com/dtsong/claude-code-windows-setup --skill github-workflow复制此命令并粘贴到 Claude Code 中以安装该技能
Use when working with dbt (data build tool) - creating models, writing tests, CI/CD pipelines, materializations, sources, staging/intermediate/marts layers, Snowflake/BigQuery warehouse configuration, incremental strategies, Jinja macros, data quality, semantic layer, or making analytics engineering decisions
Local git operations for syncing, branching, merging, and conflict resolution
Test-driven development reference for writing good tests, designing testable interfaces, mocking at system boundaries, and refactoring after green. Use when writing tests, reviewing test quality, or applying red-green-refactor workflow. Not for running test suites or CI configuration — use language-conventions or cicd-generation for those.
Use when working with Terraform or OpenTofu - creating modules, writing tests (native test framework, Terratest), setting up CI/CD pipelines, reviewing configurations, choosing between testing approaches, debugging state issues, implementing security scanning (trivy, checkov), or making infrastructure-as-code architecture decisions
Security audit checklist for web applications. Use when reviewing, auditing, or hardening a web app's security posture. Covers rate limiting, auth headers, IP blocking, CORS, security middleware, input validation, file upload limits, ORM usage, and password hashing. Triggers on requests like "review security", "harden this app", "security audit", "check for vulnerabilities", or when building/reviewing API endpoints.
Use this skill when performing hardware security analysis for System-on-Chip components — threat modeling, verification scaffolding, compliance mapping, executive briefing, microarchitectural attack analysis, physical side-channel assessment, kernel security analysis, emerging hardware security, or TLA+ formal specification. Routes to the appropriate specialist. Trigger phrases include "threat model my SoC", "run STRIDE analysis", "generate SVA assertions", "compliance check against FIPS", "executive summary of findings", "Spectre analysis for cache", "DPA attack assessment", "kernel hardening review", "PQC hardware review", "TLA+ spec for access control". Do NOT use for software-only security, network security, or web application security.
| name | GitHub Workflow |
| description | GitHub interactions for issues, PRs, releases, and repository management |
| triggers | ["github workflow","github help","gh operations"] |
| user_invocable | true |
A comprehensive suite of GitHub workflow skills using the gh CLI and GitHub MCP tools.
owner/repo format, alphanumeric with hyphens and underscores only — reject shell metacharacters and null bytes| Skill | Purpose | Invoke |
|---|---|---|
/gh-issue | Create/link/close issues | gh-issue, create issue |
/gh-triage | Batch label and prioritize | gh-triage, triage issues |
| Skill | Purpose | Invoke |
|---|---|---|
/gh-pr-status | Check PR status, CI, merge readiness | gh-pr-status, pr status |
/gh-pr-request | Request reviewers | gh-pr-request, request review |
/gh-pr-respond | View/respond to review comments | gh-pr-respond, pr comments |
/gh-pr-merge | Merge PR with strategy | gh-pr-merge, merge pr |
/gh-pr-update | Update PR branch with base | gh-pr-update, update pr |
| Skill | Purpose | Invoke |
|---|---|---|
/gh-release | Create release with changelog | gh-release, new release |
/gh-tag | Semantic version tagging | gh-tag, create tag |
/gh-changelog | Generate changelog from PRs | gh-changelog, release notes |
| Skill | Purpose | Invoke |
|---|---|---|
/gh-health | Repository health dashboard | gh-health, repo status |
/gh-mine | My assigned/mentioned items | gh-mine, my issues |
/gh-activity | Recent activity summary | gh-activity, what happened |
# Issue workflow
/gh-issue create # Create new issue
/gh-triage # Triage open issues
# PR workflow
/gh-pr-status # Check current PR
/gh-pr-request @user # Request review
/gh-pr-respond # Handle comments
/gh-pr-merge # Merge when ready
# Release workflow
/gh-changelog # Generate notes
/gh-tag v1.2.0 # Create tag
/gh-release # Create release
# Dashboard
/gh-health # Repo overview
/gh-mine # My items
/gh-activity # Recent activity
gh commands without --json output human-readable tables that are unreliable to parse — always use --json field1,field2 for programmatic usegh api results are paginated (30 items default) — use --paginate for complete results or --jq to filtergh pr create from a branch with no upstream fails — always git push -u origin <branch> firstgh pr merge --auto requires branch protection rules enabled on the repo — fails silently without themhub CLI syntax is deprecated and incompatible with gh — never suggest hub commandsgh issue create --label fails if the label doesn't exist — create labels first with gh label create/commit - Create commits with conventional messages/commit-push-pr - Full commit, push, and PR workflow/git-* - Local git operations/review-pr - Review pull requests