MCP Gateway is a gateway that routes Model Context Protocol requests from GitHub Agentic Workflows to configured MCP servers. It gives AI agents running in sandboxed environments access to MCP tools through a containerized or directly run service. The catalogue add-ons support operating and configuring the gateway in agent workflows.
Borrowing it
Nothing to install: this file belongs to github/gh-aw-mcpg. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/github/gh-aw-mcpg/main/.github/skills/agentic-workflows/SKILL.mdgit clone --depth 1 https://github.com/github/gh-aw-mcpgWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/github/gh-aw-mcpg/agentic-workflows)<a href="https://agentmods.dev/skills/github/gh-aw-mcpg/agentic-workflows"><img src="https://agentmods.dev/badge/skills/github/gh-aw-mcpg/agentic-workflows/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/github/gh-aw-mcpg/agentic-workflows"><img src="https://agentmods.dev/badge/skills/github/gh-aw-mcpg/agentic-workflows.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00028 | $0.02137 |
| Opus 5.5 | $0.00011 | $0.00855 |
| Sonnet 5.5 | $0.00006 | $0.00427 |
| Haiku 4.5 | $0.00003 | $0.00214 |
Grade A, and why
agentic-workflows scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
If GitHub API, `gh api`, or GitHub MCP downloads return HTTP 403 (including a token SAML-authorized for a different organization), do not retry with the same token. Fetch the public file without authentication from `http This is a copy
98% identical to agentic-workflows — 52 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 146 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agentic Workflows Router
Use this skill when a user asks to design, create, update, debug, or upgrade GitHub Agentic Workflows in this repository.
This skill is a dispatcher: identify the task type, load the matching workflow prompt/skill file, and follow it directly. Keep responses concise and ask a clarifying question if the correct prompt is unclear.
For debugging sessions needing CLI setup or run-URL scoping, first load
https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/debug-bootstrap.md; it bootstraps
the same shared strategy used by the debugging routes below.
Debugging, incident, health, and failure-related optimization requests use the
bootstrap's intent routing before generic update, upgrade, or optimization routes,
even when the CLI is installed. Preserve the supplied guidance repository/ref
for all debugging links and public raw fallbacks; URLs showing main below are
defaults only when no guidance revision is supplied. Reuse already-loaded guides.
The intent index is .github/aw/debug-scenarios.md; load only the selected
specialized route, not every debugging reference.
Repository overlay (optional):
- Load the target repository's
.github/aw/instructions.md, if present, after the matched prompt/skill. Use@.github/aw/instructions.mdonly in a matching checkout; do not substitute a guidance-repository overlay. - Precedence: repository overlay instructions override upstream defaults when they conflict.
Read only the files you need:
Use a local guidance checkout only when its repository/ref matches the requested guidance; otherwise use the resolved guidance repository/ref (default github/gh-aw).
If GitHub API, gh api, or GitHub MCP downloads return HTTP 403 (including a token SAML-authorized for a different organization), do not retry with the same token. Fetch the public file without authentication from https://raw.githubusercontent.com/github/gh-aw/main/<path> instead, preserving its repository-relative path (including .github/). For example: curl --fail --silent --show-error --location 'https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/create-agentic-workflow.md'. Use the same fallback for referenced instructions and SKILL.md files; never send an Authorization header or token to the raw URL. If the public download fails, report that error rather than proceeding without the required instructions. This fallback is for public github/gh-aw content only, not private or enterprise repositories.
.github/aw/action-container-substitutions.md.github/aw/agent-runtime-instructions.md.github/aw/agentic-chat.md.github/aw/agentic-workflows-mcp.md.github/aw/analyzing-runs.md.github/aw/asciicharts.md.github/aw/campaign.md.github/aw/charts-trending.md.github/aw/charts.md.github/aw/cli-commands.md.github/aw/compat.md.github/aw/configure-agentic-engine.md.github/aw/context.md.github/aw/create-agentic-workflow-trigger-details.md.github/aw/create-agentic-workflow.md.github/aw/create-shared-agentic-workflow.md.github/aw/debug-agentic-workflow.md.github/aw/debug-bootstrap.md.github/aw/debug-compilation.md.github/aw/debug-live-testing.md.github/aw/debug-model-engine-misconfiguration.md.github/aw/debug-playbook.md.github/aw/debug-scenarios.md.github/aw/debug-security-review.md.github/aw/debug-workflow-evidence.md.github/aw/debug-workflow-health.md.github/aw/dependabot.md.github/aw/deployment-status.md.github/aw/designer-mappings.md.github/aw/designer.md.github/aw/documentation-workflows.md.github/aw/drive-memory.md.github/aw/enclaves.md.github/aw/evals.md.github/aw/experiments.md.github/aw/github-agentic-workflows.md.github/aw/github-mcp-server-pagination.md.github/aw/github-mcp-server-tools.md.github/aw/github-mcp-server.md.github/aw/instructions.md.github/aw/intent.md.github/aw/jobs.md.github/aw/ledger.md.github/aw/linter-workflows.md.github/aw/llms.md.github/aw/loop.md.github/aw/lsp.md.github/aw/maintainer.md.github/aw/mcp-clis.md.github/aw/memory-stateful-patterns.md.github/aw/memory.md.github/aw/messages.md.github/aw/multi-agent-research.md.github/aw/network.md.github/aw/optimize-agentic-workflow.md.github/aw/patterns.md.github/aw/playwright.md.github/aw/pr-reviewer.md.github/aw/release-workflow.md.github/aw/report.md.github/aw/reuse.md.github/aw/safe-outputs-automation.md.github/aw/safe-outputs-content.md.github/aw/safe-outputs-management.md.github/aw/safe-outputs-runtime.md.github/aw/safe-outputs.md.github/aw/serena-tool.md.github/aw/shared-safe-jobs.md.github/aw/skills.md.github/aw/subagents.md.github/aw/syntax-agentic.md.github/aw/syntax-checkout.md.github/aw/syntax-core.md.github/aw/syntax-engine.md.github/aw/syntax-tools-imports.md.github/aw/syntax.md.github/aw/test-coverage.md.github/aw/test-expression.md.github/aw/token-optimization-caching-budgets.md.github/aw/token-optimization-observability.md.github/aw/token-optimization.md.github/aw/triggers.md.github/aw/update-agentic-workflow.md.github/aw/upgrade-agentic-workflows.md.github/aw/visual-regression.md.github/aw/work-queue.md.github/aw/workflow-constraints.md.github/aw/workflow-editing.md.github/aw/workflow-patterns.md
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +19 lines 7d625a419c4e
- yesterday Changed · +2 lines 34933f480d02
- 5d ago Changed · -1 lines bdd86dfde0c4
- 6d ago Changed · +1 lines c41584a1f83d
- 7d ago Changed · +4 lines a0e57c712887
- 10d ago Changed · +2 lines fc40f9eac88a
- 12d ago Changed · +1 lines 3a5864bda1a6
- 14d ago Changed · +3 lines 6792f374878f
- 16d ago Changed · +8 tokens per session f799e3c9f67a
- 17d ago First seen · 115 lines · 20 tokens per session scan A 3e62c5742cef
agentic-workflows is a skill published in the GitHub repository github/gh-aw-mcpg (181 stars, last pushed today), licensed MIT. It adds 28 tokens to every session and 2,137 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). It is 98% identical to agentic-workflows, differing in 52 lines, and is treated as a copy.
Other skills, from other repositories
chinese-git-workflow
A reference for configuring Git with Chinese code-hosting services such as Gitee, Coding.net, GitLab China, and CNB, including SSH, HTTPS, credentials, CI, and repository mirroring.
atmos-profiles
Atmos profiles: profile directories, --profile and ATMOSPROFILE activation, profile merge behavior, environment switching, and routing profile-specific auth/toolchain/config overrides.
webhook-management
Configure and validate CCAM webhook targets across supported chat, incident, automation, and generic providers. Use when listing provider requirements, creating or updating a target, scoping it to alert rules, sending a test notification, reviewing delivery history, or deleting a target.
managing-github-actions-secrets
Creates and updates GitHub Actions secrets for PostHog workflows. Use when adding a new CI secret, rotating an existing secret, wiring a workflow to an API token, package registry credential, deploy key, or any value referenced via ${{ secrets. }} in .github/workflows/.
monorepo-management
Master monorepo management with Turborepo, Nx, and pnpm workspaces to build efficient, scalable multi-package repositories with optimized builds and dependency management. Use when setting up monorepos, optimizing builds, or managing shared dependencies.
deployment-engineer
Expert deployment engineer specializing in modern CI/CD pipelines, GitOps workflows, and advanced deployment automation. Masters GitHub Actions, ArgoCD/Flux, progressive delivery, container security, and platform engineering. Handles zero-downtime deployments, security scanning, and developer experience optimization.…