Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ulises-jeremias/agent-toolkit --skill github-cli-workflowgit clone --depth 1 https://github.com/ulises-jeremias/agent-toolkitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ulises-jeremias/agent-toolkit/github-cli-workflow)<a href="https://agentmods.dev/skills/ulises-jeremias/agent-toolkit/github-cli-workflow"><img src="https://agentmods.dev/badge/skills/ulises-jeremias/agent-toolkit/github-cli-workflow/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ulises-jeremias/agent-toolkit/github-cli-workflow"><img src="https://agentmods.dev/badge/skills/ulises-jeremias/agent-toolkit/github-cli-workflow.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00043 | $0.00521 |
| Opus 5.5 | $0.00017 | $0.00208 |
| Sonnet 5.5 | $0.00009 | $0.00104 |
| Haiku 4.5 | $0.00004 | $0.00052 |
Grade A, and why
github-cli-workflow scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
GitHub CLI — draft PR (HOW)
Use this skill when the remote is GitHub and you need to push and open a draft pull request. Workflow skills delegate here; this skill does not replace Jira or ClickUp procedures.
Prerequisites
ghauthenticated (gh auth status).- Branch pushed to
origin(or the remote your team uses).
Recommended flow
- Ensure the working branch tracks the remote: push with upstream as usual for the repo.
- Prefer the repository PR template for the body: use
--body-filepointing at a generated file that includes template sections, or paste from.github/pull_request_template.mdwhen required. If no template exists in the repo, usepr-fallback(WHAT) to build the body andoutput-handshaketo confirm where the file lives and that a human will review beforegh pr create. - Create a draft PR:
gh pr create --draft --title "YOUR_TITLE" --body-file /path/to/body.md
If the repo expects a base branch other than the default:
gh pr create --draft --base develop --title "YOUR_TITLE" --body-file /path/to/body.md
- If
--draftis rejected bygh, retry once without--draftand state in chat that the PR could not be created as draft via CLI.
Title and body
- Keep titles within team conventions (often including ticket keys).
- Validate title and body with the user before calling the step complete.
Fallback (CLI failure)
- Write an untracked file
PR_DESCRIPTION_<WORK_ITEM_ID>.mdin the repo root or/tmpwith title + body ready to paste. - Do not
git addthis file. - Give manual steps: open the compare URL on GitHub and create a draft PR from the branch, pasting from the file.
Safety
- Do not expose tokens or paste secrets into PR bodies.
- Do not force-push shared default branches unless the user explicitly requests it.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 50 lines · 43 tokens per session scan A 618084f066f5
github-cli-workflow is a skill published in the GitHub repository ulises-jeremias/agent-toolkit (19 stars, last pushed yesterday), licensed MIT. It adds 43 tokens to every session and 521 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other skills, from other repositories
github-navigator
GitHub operations via gh CLI. CRITICAL: Use instead of WebFetch for any github.com URL or GitHub repo path like owner/repo. Use when the user asks to inspect repositories, files, issues, pull requests, releases, Actions runs, or repository structure. Use when the user says 'show README', 'list issues', 'check PR'…
active-review
Use when the user wants to prepare for a manual PR code review and asks for help targeting it — a terse PR summary, ranked files to read first, and paste-ready inline comment drafts with GitHub deep-links. Triggers: "active review this PR", "walk me through this PR", "help me review this", "give me inline comments to…
analyze-knowledge
Use when the user asks who knows specific code, who should review a PR or files, what the lottery factor is, whether knowledge is concentrated or spread, who to talk to about a code area, or when suggesting reviewers beyond GitHub's built-in suggestions.
bisect
Use when hunting a regression, phrases like "bisect", "find the commit that broke X", "this used to work", "regression in test Y", "when did start". Also use when escalated from ci-debug-loop because log analysis can't pinpoint the offending change, or when a previously-passing test/build/behavior is now failing and…
fix-pr-conflict
Resolve merge conflicts on a pull request by rebasing onto the base branch. Use when a PR is not mergeable, has merge conflicts, or the user asks to fix conflicts on a PR.
create-pr
Use when creating a new GitHub pull request, opening a PR for the current branch, or when another skill (like ship-it) needs a PR created for a branch that does not have one yet.