GitHub Agentic Workflows is a GitHub CLI extension that lets developers define AI-assisted repository automation in Markdown and run it through GitHub Actions. It is intended for tasks requiring interpretation or reasoning, such as issue triage, pull-request review, CI investigation, documentation maintenance, and dependency analysis. The catalogue entries provide skills and agents for working with these workflows.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add github/gh-aw --skill open-pull-requestgit clone --depth 1 https://github.com/github/gh-awWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/github/gh-aw/open-pull-request)<a href="https://agentmods.dev/skills/github/gh-aw/open-pull-request"><img src="https://agentmods.dev/badge/skills/github/gh-aw/open-pull-request/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/github/gh-aw/open-pull-request"><img src="https://agentmods.dev/badge/skills/github/gh-aw/open-pull-request.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 55 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 58 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00020 | $0.00748 |
| Opus 5.5 | $0.00008 | $0.00299 |
| Sonnet 5.5 | $0.00004 | $0.00150 |
| Haiku 4.5 | $0.00002 | $0.00075 |
Grade A, and why
open-pull-request scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 65 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Open Pull Request
Publish the current gh-aw branch as a draft pull request from a GitHub Copilot cloud agent after the repository's required validation and push steps have completed.
Purpose
Package the repository's repeated publish flow into one reusable skill so agents stop improvising gh pr create sequences and consistently use local validation, report_progress, and the runtime pull-request tool.
Conditions (C)
Use this skill when the current branch contains the intended changes, the run can call both report_progress and create_pull_request, and the task is to open or update one gh-aw pull request rather than finish an existing review cycle.
Interface (R)
Inputs: a PR title, summary, optional draft flag, and any repository-specific validation notes. Outputs: pushed branch state via report_progress, one created or updated draft pull request, and a short publication summary that names the validation that ran.
Policy (π)
Before publishing, inspect the repository for a pull-request template and follow it when present. Run repository-specific preparation before the final push: make fmt after Go changes, make recompile after workflow markdown changes, make agent-report-progress-no-test before any intermediate report_progress, and make agent-report-progress before the final report_progress. Use report_progress to commit and push the branch, then call create_pull_request exactly once to open the PR. Prefer draft mode by default. Never use gh pr create, direct git push, or ad hoc publication commands from bash in cloud-agent runs.
Termination (T)
Success means the working tree is published through report_progress, the final validation target finished without unresolved errors, and exactly one draft pull request exists for the branch with a body that summarizes changes and validation. Stop after publication; use pr-finisher for review-thread or merge-readiness work.
Always do
- Check for a PR template before composing the body.
- Mention the exact validation commands or targets that passed.
- Keep publication to one pull request for the current branch.
- Use draft mode unless the user explicitly wants a ready-for-review PR.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 65 lines · 20 tokens per session scan A 11f72fb69b91
open-pull-request is a skill published in the GitHub repository github/gh-aw (5,579 stars, last pushed yesterday), licensed MIT. It adds 20 tokens to every session and 748 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
open-pull-request compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| open-pull-requestgithub/gh-aw | Skill | 5.6k | yesterday | MIT | A | 20 | Claude Code, Codex |
| watch-prjustincampbell/gh-watch | Skill | 4 | 7d ago | MIT | A | 48 | Claude Code |
| watch-tagjustincampbell/gh-watch | Skill | 4 | 7d ago | MIT | A | 62 | Claude Code |
| watch-branchjustincampbell/gh-watch | Skill | 4 | 7d ago | MIT | A | 45 | Claude Code |
| c-githubdaxaur/openpaw | Skill | 177 | 5mo ago | MIT | A | 48 | Claude Code, Codex |
| ci-cdLuuOW/meridian-mcp | Skill | 0 | 24d ago | MIT | C | 48 | Claude Code, Codex |
| githubAIOSAI/AIPass | Skill | 312 | 4d ago | MIT | A | 23 | Claude Code |