gh-cli
Provides a comprehensive reference for using GitHub CLI to manage repositories, issues, pull requests, and more from the command line.
Install this skill
Security score
The gh-cli skill was audited on Jun 7, 2026 and we found 22 security issues across 4 threat categories, including 4 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Curl to non-GitHub URL
| 21 | curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg |
Access to hidden dotfiles in home directory
| 656 | gh repo deploy-key add ~/.ssh/id_rsa.pub \ |
Access to hidden dotfiles in home directory
| 1730 | gh ssh-key add ~/.ssh/id_rsa.pub --title "My laptop" |
Access to hidden dotfiles in home directory
| 1733 | gh ssh-key add ~/.ssh/id_ed25519.pub --type "authentication" |
Access to hidden dotfiles in home directory
| 1749 | gh gpg-key add ~/.ssh/id_rsa.pub |
Access to hidden dotfiles in home directory
| 1932 | gh completion -s bash > ~/.gh-complete.bash |
Access to hidden dotfiles in home directory
| 1933 | gh completion -s zsh > ~/.gh-complete.zsh |
Access to hidden dotfiles in home directory
| 1934 | gh completion -s fish > ~/.gh-complete.fish |
Access to hidden dotfiles in home directory
| 1935 | gh completion -s powershell > ~/.gh-complete.ps1 |
Access to hidden dotfiles in home directory
| 2111 | # Add to ~/.bashrc or ~/.zshrc |
Access to SSH directory
| 656 | gh repo deploy-key add ~/.ssh/id_rsa.pub \ |
Access to SSH directory
| 1730 | gh ssh-key add ~/.ssh/id_rsa.pub --title "My laptop" |
Access to SSH directory
| 1733 | gh ssh-key add ~/.ssh/id_ed25519.pub --type "authentication" |
Access to SSH directory
| 1749 | gh gpg-key add ~/.ssh/id_rsa.pub |
Access to system keychain/keyring
| 21 | curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg |
Access to system keychain/keyring
| 22 | echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" | sudo tee /etc/apt/sources.list.d/github-cli.lis |
External URL reference
| 21 | curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg |
External URL reference
| 22 | echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" | sudo tee /etc/apt/sources.list.d/github-cli.lis |
External URL reference
| 469 | gh repo create my-repo --homepage https://example.com |
External URL reference
| 557 | gh repo edit --homepage https://example.com |
External URL reference
| 643 | --url-template https://jira.example.com/browse/<num> |
External URL reference
| 2184 | - Official Manual: https://cli.github.com/manual/ |