github-automation

github-automation is a skill for Claude Code, Codex from bcastelino/agent-skills-kit. It costs 39 tokens per session (2,903 once invoked), scanned A, a copy of github-automation, MIT.

A guide for automating GitHub repositories, issues, pull requests, branches, permissions, and CI/CD, the automated process of testing, building, and deploying code. It uses an MCP connection to access GitHub.

In plain words
What is it for?
Use it to manage issues and pull requests, operate on branches, configure repository permissions, and automate build or deployment workflows through GitHub.
Why use it?
It lays out the required connection and tool sequence, reducing mistakes when an agent performs GitHub tasks. It helps ensure the right repository and authentication are used before changes are made.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it to manage issues and pull requests, operate on branches, configure repository permissions, and automate build or deployment workflows through GitHub.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/bcastelino/agent-skills-kit/github-automation
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add bcastelino/agent-skills-kit --skill github-automation
Clone the repo
git clone --depth 1 https://github.com/bcastelino/agent-skills-kit

Made for: Claude Code, Codex.

Its marketplace also offers this one on its own, as the plugin github-automation — /plugin install github-automation after adding the marketplace above.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for github-automation

README.md
[![agentmods](https://agentmods.dev/badge/skills/bcastelino/agent-skills-kit/github-automation/github.svg)](https://agentmods.dev/skills/bcastelino/agent-skills-kit/github-automation)
Your own site
<a href="https://agentmods.dev/skills/bcastelino/agent-skills-kit/github-automation"><img src="https://agentmods.dev/badge/skills/bcastelino/agent-skills-kit/github-automation/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for github-automation

Your own site · 80×15
<a href="https://agentmods.dev/skills/bcastelino/agent-skills-kit/github-automation"><img src="https://agentmods.dev/badge/skills/bcastelino/agent-skills-kit/github-automation.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 39 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,903 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 91% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00039 $0.02903
Opus 5.5 $0.00016 $0.01161
Sonnet 5.5 $0.00008 $0.00581
Haiku 4.5 $0.00004 $0.00290

Measured 1mo ago against content hash 0d0c69b9c143, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

github-automation scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

91% identical to github-automation — 10 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

skills/github-automation/SKILL.md · 226 lines

How it starts

The opening of the file, as written. The whole thing — 226 lines — stays where its author put it; the contents beside it link to each section on GitHub.

GitHub Automation via Rube MCP

Automate GitHub repository management, issue tracking, pull request workflows, branch operations, and CI/CD through Composio's GitHub toolkit.

Prerequisites

  • Rube MCP must be connected (RUBE_SEARCH_TOOLS available)
  • Active GitHub connection via RUBE_MANAGE_CONNECTIONS with toolkit github
  • Always call RUBE_SEARCH_TOOLS first to get current tool schemas

Setup

Get Rube MCP: Add https://rube.app/mcp as an MCP server in your client configuration. No API keys needed: just add the endpoint and it works.

  1. Verify Rube MCP is available by confirming RUBE_SEARCH_TOOLS responds
  2. Call RUBE_MANAGE_CONNECTIONS with toolkit github
  3. If connection is not ACTIVE, follow the returned auth link to complete GitHub OAuth
  4. Confirm connection status shows ACTIVE before running any workflows

Core Workflows

1. Create and Manage Issues

When to use: User wants to create, list, or manage GitHub issues

Tool sequence:

  1. GITHUB_LIST_REPOSITORIES_FOR_THE_AUTHENTICATED_USER - Find target repo if unknown [Prerequisite]
  2. GITHUB_LIST_REPOSITORY_ISSUES - List existing issues (includes PRs) [Required]
  3. GITHUB_CREATE_AN_ISSUE - Create a new issue [Required]
  4. GITHUB_CREATE_AN_ISSUE_COMMENT - Add comments to an issue [Optional]
  5. GITHUB_SEARCH_ISSUES_AND_PULL_REQUESTS - Search across repos by keyword [Optional]

Key parameters:

  • owner: Repository owner (username or org), case-insensitive
  • repo: Repository name without .git extension
  • title: Issue title (required for creation)
  • body: Issue description (supports Markdown)
  • labels: Array of label names
  • assignees: Array of GitHub usernames
  • state: 'open', 'closed', or 'all' for filtering

Pitfalls:

  • GITHUB_LIST_REPOSITORY_ISSUES returns both issues AND pull requests; check pull_request field to distinguish
  • Only users with push access can set assignees, labels, and milestones; they are silently dropped otherwise
  • Pagination: per_page max 100; iterate pages until empty

Read the full file on GitHub · 226 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 226 lines · 39 tokens per session scan A 0d0c69b9c143

Subscribe to this mod's changes

github-automation is a skill published in the GitHub repository bcastelino/agent-skills-kit (2 stars, last pushed 2mo ago), licensed MIT. It adds 39 tokens to every session and 2,903 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 91% identical to github-automation, differing in 10 lines, and is treated as a copy.

Related

Other skills, from other repositories

deployment-pipeline-design

Design multi-stage CI/CD pipelines with approval gates, security checks, and deployment orchestration. Use when architecting deployment workflows, setting up continuous delivery, or implementing GitOps practices.

rmyndharis/antigravity-skills · 41 tokens

pr-watch

Local PR watcher. Monitors CI status, automatically fixes failing checks by reading failure logs and applying targeted fixes, then optionally merges when all checks pass. Local CLI analog to Claude Code's cloud auto-fix feature.

SethGammon/Citadel · 46 tokens

implementer

Delegate a coding task to Google's Antigravity CLI (agy staffer, fast Gemini), which edits the working tree directly and can perform explicitly requested Git delivery. Use when the user says /agy:implementer, "have agy fix/build X", or wants to hand a well-scoped coding task to the agy staffer instead of doing it in…

keli-wen/agy-staff · 79 tokens

ops-ship

OPS on-demand: This skill should be used when the user asks to "ship ops plugin", "merge all PRs and…

Lifecycle-Innovations-Limited/claude-ops · 30 tokens

cloudflare-workers-ci-cd

Complete CI/CD guide for Cloudflare Workers using GitHub Actions and GitLab CI. Use for automated testing, deployment pipelines, preview environments, secrets management, or encountering deployment failures, workflow errors, environment configuration issues.

secondsky/claude-skills · 50 tokens

push-ci

Push to remote and monitor CI. Validates branch safety, executes git push WITH explicit user approval, then monitors CI run status via gh CLI. Use when: user says 'push', 'push and watch CI', 'ship it', 'push-ci'. Not for: committing (use /smart-commit), creating PRs (use /create-pr), merging (use /merge-prep).

sd0xdev/sd0x-harness · 82 tokens