OpenShell is a runtime for autonomous AI agents that executes them in sandboxed environments governed by declarative policies. It is used to restrict agents' access to files, credentials, data, and network resources, and the catalogue includes skills and workflows for operating and contributing to it.
Borrowing it
Nothing to install: this file belongs to NVIDIA/OpenShell. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/NVIDIA/OpenShell/main/.agents/skills/create-github-pr/SKILL.mdgit clone --depth 1 https://github.com/NVIDIA/OpenShellWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/nvidia/openshell/create-github-pr)<a href="https://agentmods.dev/skills/nvidia/openshell/create-github-pr"><img src="https://agentmods.dev/badge/skills/nvidia/openshell/create-github-pr/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/nvidia/openshell/create-github-pr"><img src="https://agentmods.dev/badge/skills/nvidia/openshell/create-github-pr.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Snyk pass
- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00056 | $0.02161 |
| Opus 5.5 | $0.00022 | $0.00864 |
| Sonnet 5.5 | $0.00011 | $0.00432 |
| Haiku 4.5 | $0.00006 | $0.00216 |
Grade A, and why
create-github-pr scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 14d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 276 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Create GitHub Pull Request
Create pull requests on GitHub using the gh CLI.
Prerequisites
- The
ghCLI must be authenticated (gh auth status) - You must have commits on a branch that's pushed to the remote
- Every PR must close an existing issue, except automated dependency updates and build or flaky-test fixes from authors with write access, as described in
CONTRIBUTING.md. Follow Branch Names inCONTRIBUTING.mdfor contributor branch names.
Before Creating a PR
Verify Contributor Access and Issue Acceptance
Before pushing or creating a PR (including a draft), verify the author's access
to the target repository, not their fork. For the authenticated gh user:
gh repo view OWNER/REPO --json nameWithOwner,viewerPermission
gh issue view ISSUE_NUMBER --repo OWNER/REPO --json number,url,labels
Authors with verified WRITE, MAINTAIN, or ADMIN access may proceed without
state:accepted; keep the issue link and note the missing label. Everyone else
must link at least one target-repository issue and have state:accepted on each.
Otherwise, preserve local work and report which issue needs acceptance. A direct
request, roadmap placement, other labels, or vouch status does not bypass this gate.
When acting for another author, verify their permissions. Resolve failed lookups before proceeding; retry sandbox network failures outside the sandbox before reporting an authentication problem. Vouch requirements still apply separately.
Check Config Documentation
If the branch changes gateway TOML parsing, [openshell.gateway] fields,
[openshell.drivers.<name>] fields, driver config defaults, or Helm rendering
of gateway.toml, verify that docs/how-it-works/gateways/configuration.mdx is updated
in the same branch. If the change affects user-facing compute-driver setup,
also update docs/how-it-works/sandboxes/runtimes.mdx or the relevant
deployment docs.
Check Agent Infrastructure
Use the sync-agent-infra skill's maintenance map to identify related skill updates when the branch changes behavior, commands, or development workflows. Run its full consistency check when the branch adds, removes, or renames skills or crates; changes workflow relationships or skill coverage; modifies issue or PR templates; or changes agent cross-references. Resolve any drift before creating the PR.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 14d ago Changed 2abe7f747b83
- 18d ago Changed · +9 lines cd2aa9f9828e
- 24d ago Changed · +23 lines 1ef41a6be506
- 1mo ago Changed a645096e8c05
- 1mo ago Changed · -10 lines 911b5552befc
- 1mo ago Changed c658d841c6f5
- 1mo ago Changed 0ca9e9497638
- 2mo ago Changed · +2 lines f7199cd8d24b
- 2mo ago First seen · 252 lines · 56 tokens per session scan A 113e5015670a
create-github-pr is a skill published in the GitHub repository NVIDIA/OpenShell (21,172 stars, last pushed yesterday), licensed Apache-2.0. It adds 56 tokens to every session and 2,161 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
create-github-pr compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| create-github-prNVIDIA/OpenShell | Skill | 21k | yesterday | Apache-2.0 | A | 56 | Claude Code, Codex |
| merge-batchdiegosouzapw/OmniRoute | Skill | 83k | 5d ago | MIT | A | 46 | Claude Code |
| prowler-commitprowler-cloud/prowler | Skill | 15k | yesterday | Apache-2.0 | A | 44 | Claude Code, Codex |
| gh-auth-isolationgithub/gh-aw | Skill | 5.6k | today | MIT | A | 20 | Claude Code, Codex |
| github-skillzeenie-ai/OpenCompany | Skill | 1.1k | yesterday | MIT | A | 51 | Claude Code |
| comet-githubrpamis/comet | Skill | 3.3k | today | MIT | A | 72 | Claude Code, Codex |
| release-helperSahir619/fable-method | Skill | 2.3k | 1mo ago | MIT | A | 43 | Claude Code |