Skip to main content

github

Enables interaction with GitHub repositories using the GitHub REST API for various operations like reading and managing files.

Install this skill

or
53/100

Security score

The github skill was audited on Feb 28, 2026 and we found 5 security issues across 3 threat categories, including 1 critical. Review the findings below before installing.

Categories Tested

Security Issues

critical line 13

Piping content to sh shell

SourceSKILL.md
13- `uv` - The scripts in this skill require the [uv](https://docs.astral.sh/uv/) package manager/runner. Most cloud-based AI agents have `uv` pre-installed (or they can install it). Local agents should
high line 13

Curl to non-GitHub URL

SourceSKILL.md
13- `uv` - The scripts in this skill require the [uv](https://docs.astral.sh/uv/) package manager/runner. Most cloud-based AI agents have `uv` pre-installed (or they can install it). Local agents should
medium line 558

Curl to non-GitHub URL

SourceSKILL.md
558curl -H "Authorization: token $GITHUB_TOKEN" https://api.github.com/rate_limit
low line 13

External URL reference

SourceSKILL.md
13- `uv` - The scripts in this skill require the [uv](https://docs.astral.sh/uv/) package manager/runner. Most cloud-based AI agents have `uv` pre-installed (or they can install it). Local agents should
low line 558

External URL reference

SourceSKILL.md
558curl -H "Authorization: token $GITHUB_TOKEN" https://api.github.com/rate_limit
Scanned on Feb 28, 2026
View Security Dashboard