Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add babarot/gh-infra --skill import-intogit clone --depth 1 https://github.com/babarot/gh-infraWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/babarot/gh-infra/import-into)<a href="https://agentmods.dev/skills/babarot/gh-infra/import-into"><img src="https://agentmods.dev/badge/skills/babarot/gh-infra/import-into/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/babarot/gh-infra/import-into"><img src="https://agentmods.dev/badge/skills/babarot/gh-infra/import-into.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00048 | $0.00838 |
| Opus 5.5 | $0.00019 | $0.00335 |
| Sonnet 5.5 | $0.00010 | $0.00168 |
| Haiku 4.5 | $0.00005 | $0.00084 |
Grade A, and why
import-into scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 15d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 105 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Import Into
Use this skill for gh infra import --into=....
This workflow is different from normal import, plan, and apply:
- it updates local manifests from live GitHub state
- it may rewrite YAML, local source files, or manifest patches
- it has file-level write modes and skip safety rules
When To Use
Use this skill when the user wants to:
- pull GitHub state back into existing manifests
- reconcile drift from GitHub UI into local YAML
- decide between
write,patch, andskip - understand why a file was skipped during import
- update shared templates safely after repository-side drift
Command
gh infra import <owner/repo> [owner/repo ...] --into=<path>
gh infra import --into=<path> --auto-approve # CI / agents: no prompt
<path> may be a file or a directory of manifests. Without repositories, every repository in the manifests is imported.
When running as an agent or in CI, use --auto-approve: the confirmation needs a TTY, and without one import fails before writing (the error suggests the flag). --auto-approve writes each file with its default action (below), the same as confirming without opening the viewer; reconcile: create_only files without patches are skipped. It requires --into. Import only edits local files: review with git diff, then commit or open a pull request yourself.
How It Works
- Parse local manifests
- Match target repositories against
Repository,RepositorySet, andFileSet - Fetch live state from GitHub
- Diff local vs remote
- Show plan output
- For file changes, open the interactive diff viewer (not with
--auto-approve) - Write approved local changes
File Write Modes
write: update the normal local targetpatch: store the drift underpatches:skip: ignore for this run
Typical defaults:
- inline content:
write - single-use local source:
write - shared local source:
patch - existing
patches:entry:patch - many
create_onlyentries:skip
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 15d ago Changed · +3 lines ba62205cc378
- 1mo ago First seen · 102 lines · 48 tokens per session scan A 0e4e89c49c9a
import-into is a skill published in the GitHub repository babarot/gh-infra (140 stars, last pushed yesterday), licensed MIT. It adds 48 tokens to every session and 838 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
gh-attach
Uploads a local file (screenshot, image, PDF, zip, video) to GitHub user-attachments, downloads GitHub user-attachments, and embeds local files in a PR, issue, or comment. Use when asked to "attach a screenshot to the PR", "add an image to the issue", "embed before/after screenshots", "attach this file", or "download…
gh-stack
Manages stacked PRs and splits multi-part work into reviewable branches with gh-stack. Use for stack creation, viewing, edits, push, submit, sync, rebase, merge, or checkout; when asked to split or isolate work for review; whenever a user mentions a stack, branch layers, dependent PRs, or gh stack; or when a stack is…
pkup-enchant
Enrich an existing PKUP report directory — group commits into tasks, filter out non-creative groups, and write Polish descriptions. Use when the user has already generated a PKUP report and wants to clean it up or add "Zaprojektowałem..." descriptions.
vhs-e2e-gif
Record a test run, a TUI session, or any terminal command as a GIF with VHS and attach it to a GitHub PR as a release-hosted asset, never a repo commit. Use when asked to record an e2e run, demo a fix on a PR, attach a GIF or screen recording to a pull request, show a test passing visually, or produce a terminal…
check-linters-before-commit
Before any commit, run linters, vet, tests, and build verification; do not commit until checks pass.
ghtkn
Read ghtkn's documentation with ghtkn docs list and ghtkn docs show before answering. ghtkn is a CLI that creates short-lived (8h) GitHub user access tokens from GitHub Apps. Use for any question about ghtkn, GHTKN environment variables, ghtkn get / exec / auth / agent / revoke, the ghtkn git credential helper, or…