agentmods.dev

alice: Skill for Codex

.agents/skills/github/SKILL.md

github is a skill for Codex from Alice-space/alice. It costs 90 tokens per session (776 once invoked), scanned A, original, MIT.

A skill for managing GitHub repositories through Git and GitHub's command-line tools, including a defined `dev` to `main` release process. A pull request is a request to review and merge one branch into another, and GitHub Actions are automated checks or jobs run by GitHub.

In plain words
What is it for?
Use it to push `dev`, create or reuse a `dev`-to-`main` pull request, merge it, wait for the resulting release, or update an Alice installation.
Why use it?
It coordinates branch checks, pull requests, merges, release waiting, and self-updates while stopping when the repository is dirty, blocked, behind, or conflicted.

Skill for Codex

Written for Codex: agents/openai.yaml present. Also seen: installed under .agents/ (shared by several agents).

This is Alice-space/alice's own configuration. It tells Codex how to work on alice itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything alice configures →

not rated 6repo 3mo ago A scan 90 tokens original MIT
View source ↗ Alice-space/alice alice-space.github.io
Reuse

Borrowing it

Nothing to install: this file belongs to Alice-space/alice. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/Alice-space/alice/main/.agents/skills/github/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/Alice-space/alice

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for github

README.md
[![agentmods](https://agentmods.dev/badge/skills/alice-space/alice/github/github.svg)](https://agentmods.dev/skills/alice-space/alice/github)
Your own site
<a href="https://agentmods.dev/skills/alice-space/alice/github"><img src="https://agentmods.dev/badge/skills/alice-space/alice/github/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for github

Your own site · 80×15
<a href="https://agentmods.dev/skills/alice-space/alice/github"><img src="https://agentmods.dev/badge/skills/alice-space/alice/github.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 90 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 776 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00090 $0.00776
Opus 5.5 $0.00036 $0.00310
Sonnet 5.5 $0.00018 $0.00155
Haiku 4.5 $0.00009 $0.00078

Measured 2mo ago against content hash 64831fd16c4c, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

github scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

The scan reads SKILL.md. This mod also ships 1 executable file (scripts/github.sh), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/github/SKILL.md · 57 lines

What it actually says

GitHub

优先使用 scripts/github.sh，并依赖当前机器上已经登录的 gh。这个 skill 主要为 Alice 当前的发布链路设计，但也能复用于同样遵循 dev -> main、merge commit、merge 后自动发 release 的仓库。

Quick Start

  • 创建新的发行版： scripts/github.sh create-release --repo-dir /path/to/repo
  • 更新 Alice 运行时到最新稳定版： scripts/github.sh update-self --repo-dir /path/to/alice
  • 更新 Alice 运行时到指定版本： scripts/github.sh update-self --repo-dir /path/to/alice --version vX.Y.Z

Workflow

  1. 先确认目标仓库的工作树干净，避免把未提交或无关改动推进 release。
  2. 对 Alice 仓库，默认发布路径固定为 dev -> main，合并方式固定为 merge。
  3. create-release 会自动执行这些步骤：
    • 校验 Git 仓库、当前分支和工作树状态
    • 推送 dev
    • 创建或复用 dev -> main 的 open PR
    • 轮询 PR 状态，直到可以用 merge commit 合并
    • 等待与 merge commit 对应的正式 GitHub Release 出现
  4. update-self 通过 npm install -g @alice_space/alice@latest 更新 Alice，然后重启 systemd 服务。

Guardrails

  • 只有在仓库确实采用 dev -> main 自动发布流程时才使用默认参数；Alice 仓库的固定规则见 references/alice-release-flow.md。
  • create-release 依赖 gh auth status 通过；脚本只通过 gh 使用当前机器上的 GitHub 登录态，不自己读取、拼接或打印 token。
  • 如果当前仓库存在未提交改动，先停下来，确认这些改动是否应该进入这次 release。
  • 如果 PR 长时间停留在 blocked、behind 或 dirty，不要强行改写分支；先检查分支保护、必需检查项或冲突原因。

Alice Repo Notes

  • 读 references/alice-release-flow.md 获取 Alice 仓库的分支与发布约束。
  • update-self 默认更新 stable release；只有用户明确要求时才加 --channel dev。
  • 发布完成后，在回复里给出 PR 编号、merge commit SHA、release tag 和 release URL。

Response Pattern

  • 明确说明执行的是 create-release 还是 update-self。
  • 对 release 流程，回复里带上：
    • 仓库名
    • PR 编号
    • merge commit SHA
    • release tag 和 URL
  • 对自更新，回复里带上：
    • 使用的仓库
    • channel / version
    • ALICE_HOME 或显式 --home
  • 如果因为 gh 未登录、分支状态异常或仓库不匹配而未执行，明确说明阻塞点和下一步。
Files

What ships with it

3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 57 lines · 90 tokens per session scan A 64831fd16c4c

Subscribe to this mod's changes

github is a skill published in the GitHub repository Alice-space/alice (6 stars, last pushed 3mo ago), licensed MIT. It adds 90 tokens to every session and 776 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Git and workflowReleasesai-agentchatbotcliconnectordeepseekdeepseek-v4
Related

github compared with skills from other repositories

github next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
githubAlice-space/aliceSkill63mo agoMITA90Codex
git-workflow0xNyk/oneclawSkill32mo agoMITA0Claude Code, Codex
rea-changelog-updatemorluto/reaSkill435kyesterdayMITA33Claude Code
batchasgeirtj/system_prompts_leaksSkill71k2d agoCC0-1.0A30Claude Code
update-v8-versionopeninterpreter/openinterpreterSkill69k3d agoApache-2.0A86Codex
codew-release-qa-sweepHmbown/CodeWhaleSkill41k5d agoMITA31Claude Code, Codex
releaseHmbown/CodeWhaleSkill41k5d agoMITA0Claude Code, Codex