Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add thewolffish/wolffish-app --skill githubgit clone --depth 1 https://github.com/thewolffish/wolffish-appWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/thewolffish/wolffish-app/github)<a href="https://agentmods.dev/skills/thewolffish/wolffish-app/github"><img src="https://agentmods.dev/badge/skills/thewolffish/wolffish-app/github/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/thewolffish/wolffish-app/github"><img src="https://agentmods.dev/badge/skills/thewolffish/wolffish-app/github.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00048 | $0.11309 |
| Opus 5.5 | $0.00019 | $0.04524 |
| Sonnet 5.5 | $0.00010 | $0.02262 |
| Haiku 4.5 | $0.00005 | $0.01131 |
Grade A, and why
github scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 1,303 lines — stays where its author put it; the contents beside it link to each section on GitHub.
GitHub
Interact with GitHub repositories, issues, pull requests, branches, CI, releases, gists, collaborators, labels, milestones, reviews, notifications, stars, forks, and more.
Connections
GitHub access is organized into connections. Each connection is one GitHub account the user linked, identified by a label they chose (for example Work or Personal). The label is how you — and the user — tell one account apart from another.
- Call
github_connectionsto see the configured labels and which account each points to. It never returns tokens. - Pass the chosen label as the
connectionparameter on every othergithub_*tool call. - You may omit
connectiononly when exactly one connection is configured. When several exist and you don't pass one, the tool returns an error listing the available labels — read it and retry with the right label. - Match the label to the user's intent: "my work github" → the connection labeled
Work; "my personal account" →Personal. If it is genuinely ambiguous which the user means, ask them before acting.
Authentication
Set your Personal Access Token (PAT) in Settings > Services > GitHub. The token needs the repo scope for full repository access. For public repos only, public_repo is sufficient. For gists, add gist. For deleting repos, add delete_repo. For notifications, add notifications. For listing organization membership (github_list_user_orgs), add read:org.
When to use each tool
- Repos:
github_list_reposto browse your repos,github_list_user_orgsto see which orgs you belong to,github_list_org_reposto browse an org's repos,github_get_repofor details,github_create_repoto create - User:
github_get_authenticated_userto find out who the token belongs to — useful to resolve "my" repos or as the owner arg - Issues:
github_list_issuesto browse,github_get_issuefor full detail + comments,github_create_issueto file,github_close_issueto close - Comments:
github_list_comments_on_issuefor just the discussion thread (lighter than github_get_issue),github_add_commentto post a comment - Labels:
github_list_labelsto see available labels,github_create_labelto add one,github_add_labels_to_issueto tag issues/PRs - Milestones:
github_list_milestonesto see project milestones,github_create_milestoneto add one - PRs:
github_list_prsto browse,github_get_prfor full detail + diff stats,github_create_prto open,github_update_prto edit title/body/state/base,github_merge_prto merge - PR reviews:
github_list_pr_reviewsfor review status,github_request_reviewersto request reviews - PR files:
github_list_pr_filesfor the file-level diff summary (pairs well with github_get_pr for a full review picture) - Branches:
github_list_branchesto see all,github_delete_branchto remove merged branches - CI:
github_get_workflow_runsfor run status,github_get_workflow_run_logsfor failure details,github_rerun_workflowto retry,github_cancel_workflow_runto stop,github_dispatch_workflowto trigger manually - Releases:
github_list_releasesto browse,github_get_releasefor full detail + assets,github_create_releaseto publish - Commits:
github_get_commitfor details on a specific commit,github_compare_commitsto see the diff between two refs - Code:
github_search_codeto find code across GitHub,github_get_file_contentto read a specific file - Collaborators:
github_list_collaboratorsto see who has access,github_add_collaboratorto invite,github_remove_collaboratorto revoke - Topics:
github_list_repo_topicsto see tags,github_replace_repo_topicsto update them - Gists:
github_list_giststo browse,github_create_gistto share snippets - Notifications:
github_list_notificationsto check what needs attention,github_mark_notifications_readto clear - Stars:
github_list_stargazersto see who starred a repo,github_star_repo/github_unstar_repoto manage stars - Forks:
github_fork_repoto fork a repo into your account or an org
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +25 lines fe681bbea281
- 1mo ago First seen · 1,278 lines · 48 tokens per session scan A 7decb09d7b6e
github is a skill published in the GitHub repository thewolffish/wolffish-app (5 stars, last pushed 17d ago), licensed MIT. It adds 48 tokens to every session and 11,309 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
release
Prepare, verify, and publish Sutando engine releases. Use when asked to prepare a release proposal, determine a version bump, audit release documentation, validate release gates, create a release PR, tag a confirmed release, or publish GitHub release notes. Preparation is safe and non-publishing; tagging and…
agent-github-modes
Agent skill for github-modes - invoke with $agent-github-modes.
github-automation
GitHub workflow automation, PR management, issue tracking, and code review coordination. Integrates with GitHub Actions and repository management. Use when: PR creation, code review, issue management, release automation, workflow setup. Skip when: local-only changes, non-GitHub repositories.
agent-framework-py-release
Use when cutting a Python release for the microsoft/agent-framework monorepo. Triggers on "bump py versions", "cut a python release", "prepare release PR for python", "release py packages", "bump python to X.Y.Z", or similar requests to bump Python package versions and prepare a release PR. Handles all four lifecycle…
changelog-scan
Scan merged PRs and commits since a given reference, extract titles, labels, types, and signals. Produces structured input for release notes drafting.
draft-release-notes
Turn changelog-scan output into polished, categorized release notes draft. Propose only.