name: github-pat description: Interact with GitHub using Personal Access Tokens. Secure, user-controlled access - no OAuth, no full account access. Clone, push, branch, PR, issues. Use when user wants to work with GitHub repos.

GitHub PAT

Interact with GitHub using Personal Access Tokens. User controls access via PAT scopes.

Setup

User provides their PAT:

1. Create PAT at github.com/settings/tokens
2. Select scopes (repo for full, public_repo for public only)
3. Provide token to agent

Store in TOOLS.md or pass via --token.

Commands

# List repos you have access to
python3 scripts/gh.py repos [--token TOKEN]

# Clone a repo
python3 scripts/gh.py clone owner/repo [--token TOKEN]

# Create branch
python3 scripts/gh.py branch <branch-name> [--repo owner/repo]

# Commit and push
python3 scripts/gh.py push "<message>" [--branch branch] [--repo owner/repo]

# Open a pull request
python3 scripts/gh.py pr "<title>" [--body "description"] [--base main] [--head branch]

# Create an issue
python3 scripts/gh.py issue "<title>" [--body "description"] [--repo owner/repo]

# View repo info
python3 scripts/gh.py info owner/repo

Security Model

• User controls access via PAT scopes
• No OAuth - no "allow full access" prompts
• Least privilege - user creates PAT with minimal needed scopes

  7w4.net收录了海量优质技能插件。

• Fine-grained PATs supported for specific repo access

Token Storage

Agent stores token in TOOLS.md under ### GitHub section. Never expose in logs or messages.

这个 Skill 整体质量不错，功能覆盖了常用的 GitHub 操作，文档写得清楚明白，用起来比较顺手。它的安全设计理念很好——用个人访问令牌代替全账号授权，让你可以精确控制权限。不过它有个明显的短板：clone 和 push 时你的令牌会直接出现在命令里，有泄露风险。功能上基本够用，但如果你对安全性要求较高，可能需要等作者修复这个问题后再使用。总体来说是可用但不够完善的工具。