Use for GitHub CLI automation: repository reads, workflow runs, search, codespaces, releases, configuration, or gh command syntax. Use yeet for contribution writes to PRs, issues, comments, or discussions.

GitHub CLI This skill is coordination exempt: skip the ai coord gate for its declared work. Routing Use yeet to author or update a pull request, issue, issue comment, or discussion. yeet owns semantic analysis, repository templates, Paul's writing voice, idempotency, and direct posting. Route repository renames through repo rename so GitHub and local continuity change together. Authority Read and inspect without confirmation. Execute reversible or ordinary GitHub writes only when the user explicitly requested that outcome. Never delete repositories, releases/assets, workflow runs/caches, secrets/variables, keys, codespaces, extensions, or gists. Label deletion is the sole destructive exception: show the target repo, exact labels, commands, and issue/PR impact, then require approval in a subsequent message before gh label delete ... yes . Workflow 1. Resolve the repository explicitly when cwd is ambiguous. Let the first required read only command validate authentication. Run gh auth status only for auth diagnosis. 2. Use installed gh <command <subcommand help to resolve flags, JSON fields, and command behavior. CLI JSON field names can differ from API fields. Prefer json with jq for structured output. 3. Preview broad writes with the repository, exact targets, commands, and issue/PR impact. An already requested ordinary write does not require a second approval. CI Failure Triage Use this workflow when the user asks why CI fails or asks to fix a failing run. Keep each command output bounded. 1. Find the failing runs for the branch or the commit: 2. Extract only the failed step lines. Never print the raw log. 3. Check toolchain drift before you change code. Compare the versions pinned in .github/workflows/ .yml with the local version output. Common cases are Foundry ( forge ), Bun ( bun ), Node.js ( node ), and Rust ( rustc ). 4. If the user requested a fix, fix the cause and push the commit. 5. Get the new run ID with gh run list commit <new sha limit 5 . Then watch that run: 6. Report the run URL from gh run view <run id json url jq .url and the final run status. Notable Flags (gh 2.98+) gh pr checkout worktree <path and gh issue develop checkout worktree <path check out into a linked git worktree instead of switching the current branch. gh search issues search type semantic hybrid ranks by relevance: issues only, one page, no sort / order , not on GitHub Enterprise Server. gh config set api host <gateway host <host routes that host's API traffic through a gateway. The feature is experimental and is not a security boundary. gh auth login and gh auth refresh copy OAuth device codes to the clipboard by default (2.101+). To opt out, run gh config set clipboard disabled . gh auth login expiring (2.103+) prefers expiring OAuth tokens that gh refreshes. To prefer them on every sign in, run gh config set expiring credentials enabled . Run gh auth token each time you need a token. Never cache its output. GH TOKEN and GITHUB TOKEN values never refresh. attach '<file <alt ' on issue/PR create, edit, and comment uploads images or videos. Route those writes through yeet . Since 2.103.2, GitHub App installation tokens can attach, and the upload endpoint decides permission. Completion Complete when command output verifies the requested GitHub data or state. After a write, fetch the resulting resource. On a partial or ambiguous failure, check whether it changed before retrying. Report the verified state and URL or stable identifier. Include the concrete error and next action when incomplete, and distinguish an unknown result from a confirmed failure.

cli-gh