A GitHub connection for working with repositories, pull requests, issues, code search, Actions, and releases through GitHub's web API.

Use it to script repository checks, search code, read CI results, and create or manage pull requests and issues across repositories.

It helps when you need current GitHub data across several repositories, or when the GitHub command-line tool is unavailable or too limited.

github — Skill for Claude Code and Codex by mnlt/teleport

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add mnlt/teleport --skill github

Clone the repo

git clone --depth 1 https://github.com/mnlt/teleport

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/mnlt/teleport/github/github.svg)](https://agentmods.dev/skills/mnlt/teleport/github)

Your own site

<a href="https://agentmods.dev/skills/mnlt/teleport/github"><img src="https://agentmods.dev/badge/skills/mnlt/teleport/github/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/mnlt/teleport/github"><img src="https://agentmods.dev/badge/skills/mnlt/teleport/github.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 57 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,586 The whole file, excluding the scripts and references it only reads on demand.

Security scan B 2 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00057	$0.01586
Opus 5.5	$0.00023	$0.00634
Sonnet 5.5	$0.00011	$0.00317
Haiku 4.5	$0.00006	$0.00159

Measured 1mo ago against content hash 85875bafc38f, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

github scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

**Do NOT suggest editing `~/.claude/settings.local.json` manually.** The `teleport-setup add-key` command handles it with backup, validation, and masked input. Stop execution until the user has run the command and restar

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

GH() { curl -sL -H "Authorization: Bearer $GITHUB_TOKEN" -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" "$@"; }

skills/github/SKILL.md · 111 lines

How it starts

The opening of the file, as written. The whole thing — 111 lines — stays where its author put it; the contents beside it link to each section on GitHub.

GitHub

Direct REST access to GitHub — repos, PRs, issues, code search, Actions, releases. Use when the answer depends on current state and gh is absent or too narrow.

Usage

Use for: Cross-repo fan-out, scripted PR/issue operations, code search piped to jq, CI status reads, when gh isn't installed.
Skip for: Local edits (filesystem), commits/pushes (git), one-shot reads when user has gh (gh pr view), concept questions.

Credentials check

[ -n "${GITHUB_TOKEN:-$GITHUB_PERSONAL_ACCESS_TOKEN}" ] && echo "GITHUB_TOKEN: PRESENT" || echo "GITHUB_TOKEN: MISSING"

Never echo the variable directly (e.g. echo "$GITHUB_TOKEN") — the value would appear in the conversation transcript. Use only the boolean pattern above.

If MISSING, respond to the user with EXACTLY this message (do NOT paraphrase, do NOT suggest manual JSON edits):

I need your github credential. Run this in another terminal — it'll open the signup page, validate format, and save it safely with masked input:
teleport-setup add-key github
Then restart Claude Code (/exit, then claude) and ask me again.

Do NOT suggest editing ~/.claude/settings.local.json manually. The teleport-setup add-key command handles it with backup, validation, and masked input. Stop execution until the user has run the command and restarted.

API

Base URL: https://api.github.com
Auth: Authorization: Bearer $GITHUB_TOKEN
Accept: Accept: application/vnd.github+json (recommended on every call for stable response shape).
Version: X-GitHub-Api-Version: 2022-11-28 — pin this header or the default floats to whatever GitHub promotes next.
Rate limits: 5000 req/hr authenticated (60 unauth); Search is a separate 30 req/min bucket. Watch x-ratelimit-*.
Pagination: per_page (max 100), page 1-indexed. Follow the Link response header (rel="next") — not offset math.

Token flavors

Fine-grained PAT (preferred: per-repo, named permissions like contents:read) vs classic PAT (coarse scopes like repo, workflow). Inside Actions, GITHUB_TOKEN is workflow-scoped. Scopes matter: a token missing the required scope returns 404, not 401 (see Gotchas).

Read the full file on GitHub · 111 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

1mo ago First seen · 111 lines · 57 tokens per session scan B 85875bafc38f

Subscribe to this mod's changes

github is a skill published in the GitHub repository mnlt/teleport (8 stars, last pushed 5mo ago), licensed MIT. It adds 57 tokens to every session and 1,586 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it B with 2 findings (reads agent configuration directories, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Claude Code Git and workflow Releases anthropic cli developer-tool mcp model-context-protocol

pypi-release

This skill should be used when releasing tunacode-cli to PyPI. It keeps the existing local release checks, then hands the actual PyPI upload to a GitHub Actions workflow that uses the repository's PYPIAPITOKEN secret.

alchemiststudiosDOTai/tunacode · 52 tokens

context-mode-ops

Manage context-mode GitHub issues, PRs, releases, and marketing with parallel subagent army. Orchestrates 10-20 dynamic agents per task. Use when triaging issues, reviewing PRs, releasing versions, writing LinkedIn posts, announcing releases, fixing bugs, merging contributions, validating ENV vars, testing adapters…

opencue/cuecards · 75 tokens

github