github

Rules for using Git and GitHub to develop software through separate branches and pull requests. A branch is an isolated line of changes, and a pull request is a reviewable request to merge those changes.

In plain words
What is it for?
Use it to create repositories, choose branch names, commit and push changes, and follow a pull-request workflow with the GitHub command-line tool.
Why use it?
It keeps the main branch ready to deploy and makes changes easier to review, test, and undo.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/luuow/meridian-mcp/github
Any agent
npx skills add LuuOW/meridian-mcp --skill github
Clone the repo
git clone --depth 1 https://github.com/LuuOW/meridian-mcp

Made for: Claude Code, Codex.

Per session 37 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,769 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00037 $0.01769
Opus 5 $0.00018 $0.00885
Sonnet 5 $0.00007 $0.00354
Haiku 4.5 $0.00004 $0.00177

Measured yesterday against content hash 587ba4317cdf, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

github scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/github/SKILL.md · 236 lines

How it starts

The opening of the file, as written. The whole thing — 236 lines — stays where its author put it; the contents beside it link to each section on GitHub.

github

Git and GitHub discipline for solo and team projects. Core rule: main is always deployable. Every meaningful change lands via a feature branch and PR.

1) Branch Strategy

main                    ← production-ready, protected, never commit directly
  └── development       ← integration branch (optional, for staging)
        └── feature/    ← one branch per feature / fix / refactor
            bugfix/
            chore/

Always create a branch before writing code:

git checkout -b feature/add-email-capture
git checkout -b bugfix/fix-jwt-expiry
git checkout -b chore/update-dependencies

After every core change — commit and push to the branch:

git add src/email-capture.py tests/test_email_capture.py
git commit -m "feat: add ConvertKit email capture integration"
git push origin feature/add-email-capture

2) New Repo Setup (gh CLI)

# Create repo on GitHub from existing local directory
cd /opt/myproject
git init
git add .
git commit -m "chore: initial project scaffold"

# Create GitHub repo (private by default)
gh repo create myorg/myproject --private --source=. --remote=origin --push

# Immediately create development branch
git checkout -b development
git push -u origin development

# Set default branch to development in GitHub
gh repo edit myorg/myproject --default-branch development
# Clone existing repo and set up branch
gh repo clone myorg/myproject /opt/myproject
cd /opt/myproject
git checkout -b feature/my-feature

3) Existing Repo — Before Any Change

# Always start from latest main
git checkout main
git pull origin main

# Create feature branch
git checkout -b feature/ringba-call-tracking

# Work... then push
git push -u origin feature/ringba-call-tracking

Never:

git checkout main
# make changes
git commit -m "add feature"   # ❌ committing to main
git push origin main          # ❌ pushing to main directly

4) Commit Message Convention

<type>: <short description>

Types:
  feat:     new feature
  fix:      bug fix
  chore:    maintenance, deps, config
  refactor: restructure without behavior change
  test:     add or update tests
  docs:     documentation only
  ci:       CI/CD changes

Read the full file on GitHub · 236 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 236 lines · 37 tokens per session scan A 587ba4317cdf

Subscribe to this mod's changes

github is a skill published in the GitHub repository LuuOW/meridian-mcp (0 stars, last pushed 4d ago), licensed MIT. It adds 37 tokens to every session and 1,769 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.