go-sdk: Skill for Claude Code

.agents/skills/gh-view/SKILL.md

gh-view is a skill for Claude Code from qiniu/go-sdk. It costs 66 tokens per session (1,198 once invoked), scanned A, original, MIT.

A skill for examining GitHub repositories, issues, pull requests, and discussions. GitHub is a code-hosting service where teams also track work and review changes.

In plain words
What is it for?
Use it to summarize an issue or discussion, review a pull request's risks, inspect its diff and checks, or get an overview of a repository.
Why use it?
It gathers the relevant discussion, code changes, checks, and status so you can understand an item without manually opening every page.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter. Also seen: installed under .agents/ (shared by several agents); mentions AGENTS.md.

This is qiniu/go-sdk's own configuration. It tells Claude Code how to work on go-sdk itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything go-sdk configures →

View source ↗ qiniu/go-sdk
Reuse

Borrowing it

Nothing to install: this file belongs to qiniu/go-sdk. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/qiniu/go-sdk/master/.agents/skills/gh-view/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/qiniu/go-sdk

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for gh-view

README.md
[![agentmods](https://agentmods.dev/badge/skills/qiniu/go-sdk/gh-view.svg)](https://agentmods.dev/skills/qiniu/go-sdk/gh-view)
Your own site
<a href="https://agentmods.dev/skills/qiniu/go-sdk/gh-view"><img src="https://agentmods.dev/badge/skills/qiniu/go-sdk/gh-view.svg" alt="Measured on agentmods" height="20"></a>
Per session 66 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,198 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00066 $0.01198
Opus 5 $0.00033 $0.00599
Sonnet 5 $0.00013 $0.00240
Haiku 4.5 $0.00007 $0.00120

Measured 7d ago against content hash bce5693a0178, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

gh-view scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/gh-view/SKILL.md · 124 lines

How it starts

The opening of the file, as written. The whole thing — 124 lines — stays where its author put it; the contents beside it link to each section on GitHub.

GitHub 内容分析

开始时声明:"我正在使用 gh-view skill 分析 GitHub 内容。"

快速开始

  1. 识别输入类型(repo / issue / pr / discussion / release)。
  2. gh 拉取基础信息、评论、状态、代码差异。
  3. 输出结论:背景、关键点、风险、建议下一步。
  4. 默认只分析;仅在用户明确要求时执行写操作。

何时不要使用(Do NOT use)

  • 用户请求直接修改代码、提交 commit。
  • 用户主要目标是 CI 根因分析(优先 ci-analyze)。

触发样例与非样例

  • 应触发:
  • "看下这个 PR 的核心风险点:。"
  • "帮我总结这个 issue 的讨论重点。"
  • 不应触发:
  • "帮我把这个 PR 的代码直接改完并提交。"
  • "这个 pipeline fail 了,帮我查日志根因。"

使用示例

# 分析 PR
gh-view https://github.com/qiniu/go-sdk/pull/123

# 分析 issue(使用当前仓库上下文)
gh-view #456

# 查看仓库概览
gh-view qiniu/go-sdk

输入识别规则

  • 仓库:owner/repohttps://github.com/owner/repo
  • Issue:owner/repo/issues/<n>#<n>(需 repo 上下文)
  • PR:owner/repo/pull/<n>#<n>(需 repo 上下文)
  • 跨仓库编号:owner/repo#<n>

补充规则:

  • 当输入是完整 URL 时,先提取 owner/repo 与对象编号,再执行 gh 命令。
  • 用户未显式给 repo 时,默认使用 qiniu/go-sdk
  • 需要结构化信息时优先添加 --json

命令矩阵(按对象)

# 仓库
gh repo view <owner/repo>
gh repo view <owner/repo> --json name,description,defaultBranchRef,stargazerCount,forkCount,openIssuesCount

# Issue
gh issue view <n> --repo <owner/repo>
gh issue view <n> --repo <owner/repo> --comments

# PR
gh pr view <n> --repo <owner/repo>
gh pr view <n> --repo <owner/repo> --comments
gh pr diff <n> --repo <owner/repo>
gh pr checks <n> --repo <owner/repo>

输出模板

目标: <repo/issue/pr>
背景: <一句话>

关键信息:
- ...
- ...

风险/阻塞:
- ...

建议下一步:
1. ...
2. ...
3. ...

边界

  • 仅使用 gh repo view / gh issue view / gh pr view / gh pr diff / gh pr checks / gh api 等只读命令。
  • 不执行任何写操作(如 gh pr commentgh pr mergegh issue comment、打标签、关闭 issue);未明确授权时仅分析不写入。
  • 信息不足时先问澄清,不猜测。

失败回退

  • URL 解析失败:提示用户检查 URL 格式,给出合法示例。
  • gh 命令 403/404:检查仓库权限或对象是否存在;输出实际命令和报错。
  • 信息不足以给出结论:明确标注"信息不足",列出已获取内容和缺失项。

验收标准(统一)

  • 输入前提:参数与上下文可解析;缺省参数按 skill 默认值执行,并在输出中注明。
  • 产出要求:按 skill 约定的输出模板给出结果,并包含关键证据(命令、路径、链接或日志摘要)。
  • 通过判定:主流程步骤已完成且无阻塞;若有未完成项,必须明确标注影响范围与下一步。
  • 默认策略(非交互):需要确认但用户未及时响应时,采用"推荐默认值/最小风险项"继续;需要交互选择时优先推荐项。
  • 阻塞升级:遇到权限、凭证、外部依赖缺失时立即停止该步骤,输出"阻塞点 + 已尝试 + 需要用户提供的信息"。

Read the full file on GitHub · 124 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 7d ago First seen · 124 lines · 66 tokens per session scan A bce5693a0178

Subscribe to this mod's changes

gh-view is a skill published in the GitHub repository qiniu/go-sdk (157 stars, last pushed 1mo ago), licensed MIT. It adds 66 tokens to every session and 1,198 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

prowler-commit

Creates professional git commits following conventional-commits format. Trigger: When creating commits, after completing code changes, when user asks to commit.

prowler-cloud/prowler · 33 tokens

gh-auth-isolation

Safely manage multiple GitHub identities (EMU + personal) in agent workflows.

github/gh-aw · 20 tokens

comet-github

A routing guide for Comet-related GitHub work. It directs requests about pull requests, issues, CI failures, ideas, and fixes to the appropriate review or implementation process.

rpamis/comet · 72 tokens

github-skill

Work with GitHub via the gh CLI — clone repositories, create/list/merge pull requests, create/list issues, and run any other gh command (API calls, workflow runs, releases, repo administration). List operations return parsed JSON.

zeenie-ai/OpenCompany · 51 tokens

codex-autoresearch

Run autonomous, measurable experiments in a Git repository: change one hypothesis, verify a numeric metric, keep improvements, and revert failures. Use when the user wants Codex to keep iterating toward a numeric target in the foreground or as a detached background run. Do not use for ordinary one-shot coding…

leo-lilinxiao/codex-autoresearch · 80 tokens

changelog-composer

Generates structured changelogs and release notes from git history and PRs, classifying breaking changes, features, fixes, performance, docs. Triggers on: "generate changelog", "write release notes", "what changed since", "prepare release", "release notes for", "diff since tag".

Mathews-Tom/armory · 67 tokens