New: 97,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Official agent skill

gh-aw Firewall Release Integrator

by github in github/gh-aw

Bumps gh-aw's pinned gh-aw-firewall version, rebuilds generated artifacts, and flags upstream spec or schema changes that need follow-up work.

OfficialMITAuto-check passedDevelopment

Install gh-aw Firewall Release Integrator

skills CLI
$ npx skills add github/gh-aw --skill awf-release-integrator -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install github/gh-aw awf-release-integrator --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/github/gh-aw.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.github/skills/awf-release-integrator .claude/skills/awf-release-integrator && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
awf-release-integrator
GitHub stars
5.3k
Token cost
~899 tokens
SKILL.md length
398 words
Files
1
Skills in repo
52
Repo updated
First seen
Licence
MIT

At a glance

Bumps gh-aw's pinned gh-aw-firewall version, rebuilds generated artifacts, and flags upstream spec or schema changes that need follow-up work.

  • Works in 5 steps: The latest github/gh-aw-firewall release… → The current gh-aw version pins in… → The canonical AWF config sources spec in… → …
  • Upgrading gh-aw to a newer gh-aw-firewall release
  • SKILL.md covers Goal, Required sources, Update procedure and Required validation, plus 2 more sections
  • Calls make

What it does

It starts by reading the current version pins, recording the default firewall version and every minimum-version constant, then looks up the latest gh-aw-firewall release; if the tag already matches the pin, it reports that no bump is needed and only reviews release notes further if explicitly asked.

When a newer release exists, it bumps the pin and updates any minimum-version constants gated by newly introduced flags, reviews the release notes for new, removed or deprecated flags, schema or config additions, security fixes and behavioral changes, and compares the upstream specification and schema against the local embedded schema copy and config generation code. It updates embedded schema copies, version-gated helpers and tests, and specs or design records documenting newly surfaced behavior, adding a changeset when the bump changes shipped behavior.

When your agent uses it

  • Upgrading gh-aw to a newer gh-aw-firewall release
  • Checking whether a firewall version bump needs follow-up spec changes
  • Reviewing upstream schema changes against the local config code

Example prompts

  • “Check if gh-aw-firewall has a newer release and bump the pin if so.”
  • “Review the latest firewall release notes for flags we need to support.”
  • “Did this firewall bump change the config schema we embed?”

Requirements

  • A checkout of the gh-aw repository

Workflow steps

5 steps, taken from the first numbered list in SKILL.md.

  1. The latest github/gh-aw-firewall release metadata and body.
  2. The current gh-aw version pins in pkg/constants/version_constants.go.
  3. The canonical AWF config sources spec in specs/awf-config-sources-spec.md.
  4. The embedded AWF schema in pkg/workflow/schemas/awf-config.schema.json.
  5. AWF config integration code in

What it can do on your machine

Read from SKILL.md and the folder at commit eb63040. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • make

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

gh-aw Firewall Release Integrator loads about 899 tokens when it runs. Until then it costs about 26 tokens; SKILL.md has 398 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~26
When it runs · the whole SKILL.md, loaded when a task matches
~899

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from github/gh-aw at commit eb63040, republished under its MIT licence (© github). 398 words, ~899 tokens.

Download SKILL.mdSave it as .claude/skills/awf-release-integrator/SKILL.md (or your agent's skills folder).
name
awf-release-integrator
description
Upgrade gh-aw to latest gh-aw-firewall release and identify follow-up spec tasks.

AWF Release Integrator

Use this skill when updating github/gh-aw to a newer github/gh-aw-firewall release.

Goal

Land the version bump cleanly, rebuild the generated artifacts, and review upstream release/spec changes for any follow-up work that should accompany the bump.

Required sources

Consult these sources before editing anything:

  1. The latest github/gh-aw-firewall release metadata and body.
  2. The current gh-aw version pins in pkg/constants/version_constants.go.
  3. The canonical AWF config sources spec in specs/awf-config-sources-spec.md.
  4. The embedded AWF schema in pkg/workflow/schemas/awf-config.schema.json.
  5. AWF config integration code in:
    • pkg/workflow/awf_config.go
    • pkg/workflow/awf_config_build.go
    • pkg/workflow/awf_config_schema.go
    • pkg/workflow/awf_config_policy.go
    • pkg/workflow/awf_helpers.go
    • related AWF tests under pkg/workflow/

For upstream spec review, compare these files from the target github/gh-aw-firewall release or tag:

  • docs/awf-config-spec.md
  • docs/awf-config.schema.json
  • src/awf-config-schema.json
  • any release assets such as awf-config.schema.json

Update procedure

  1. Read pkg/constants/version_constants.go and record:
    • DefaultFirewallVersion
    • every AWF*MinVersion constant
  2. Look up the latest github/gh-aw-firewall release.
  3. If the latest release tag matches DefaultFirewallVersion, report that no version bump is needed and only continue with spec/release-note review if explicitly requested.
  4. If a newer release exists, update the gh-aw pins:
    • bump DefaultFirewallVersion
    • update any AWF*MinVersion constants that must move because the new release introduces or changes gated flags/features
  5. Review release notes for:
    • new flags
    • removed or deprecated flags
    • schema/config additions
    • security fixes
    • behavioral changes that could require new tests, docs, or ADR/spec updates
  6. Review the upstream AWF specification and schema changes against:
    • pkg/workflow/schemas/awf-config.schema.json
    • specs/awf-config-sources-spec.md
    • local AWF config generation and validation code
  7. Update any directly related gh-aw files needed for a complete integration, such as:
    • embedded schema copies
    • version-gated helpers/tests
    • specs or ADRs documenting newly surfaced AWF behavior
  8. Add or update a patch changeset when the bump changes shipped behavior.
Show full SKILL.md (126 more words)Show less

Required validation

After editing, run the full AWF rebuild flow exactly in this order. The second make recompile is required to refresh image SHA pins resolved during the first pass.

bash
make build
make recompile
make recompile

Then run focused validation for any touched Go code or schema logic, especially AWF-related tests.

Expected output

Summarize:

  • current gh-aw AWF version → target release
  • updated constants
  • release-note highlights
  • specification/schema differences reviewed
  • additional recommended follow-up updates that are not yet implemented

Review heuristics

When deciding whether more than a version bump is needed, specifically check for:

  • new AWF schema properties not represented in gh-aw
  • new CLI flags that need AWF*MinVersion gates
  • config fields present in schema but absent from gh-aw generation/validation
  • drift that should update specs/awf-config-sources-spec.md
  • tests whose expected pinned AWF version or schema URLs need refresh

© github, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in .github/skills/awf-release-integrator of github/gh-aw.

Open the folder on GitHubat commit eb63040

Compare with similar skills

gh-aw Firewall Release Integrator next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

gh-aw Firewall Release Integrator compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
gh-aw Firewall Release Integrator this skillgithub/gh-aw5.3k—~899Automated safety check: PassMIT
Merge Dependabot PRsonyx-dot-app/onyx32k1 repos~2.2kAutomated safety check: PassMIT
Update .NET OS Packagesdotnet/core22k—~2.3kAutomated safety check: PassMIT
OBS Plugin Dependency Upgradesorayuki/obs-multi-rtmp5.1k—~609Automated safety check: PassGPL-2.0
Renovate Actions PR Reviewbacknotprop/plannotator9.2k—~640Automated safety check: PassApache-2.0
Linea Dependency MaintenanceConsensys-Incorporated/linea-attestation-registry1771 repos~3.7kAutomated safety check: WarnMIT

Similar skills

  • Merge Dependabot PRs

    onyx-dot-app/onyx

    Triages and lands a batch of open Dependabot PRs in the Onyx repo, where main is gated exclusively by GitHub's merge queue: approves and enqueues green PRs, closes superseded duplicates, fixes…

    32k GitHub starsUsed in 1 repo~2.2k tokens
    DevelopmentAuto-check passed

  • Update .NET OS Packages

    dotnet/core

    Official

    Audits and updates os-packages.json files listing the Linux packages each .NET release needs per distro, then regenerates the Markdown from the JSON.

    22k GitHub stars~2.3k tokensUpdated yesterday
    DevelopmentAuto-check passed

  • OBS Plugin Dependency Upgrade

    sorayuki/obs-multi-rtmp

    Updates the obs-multi-rtmp plugin repo to the latest upstream plugin template and OBS Studio version, including dependency metadata, then rebuilds it with CMake.

    5.1k GitHub stars~609 tokensUpdated 5 days ago
    DevelopmentAuto-check passed

  • Renovate Actions PR Review

    backnotprop/plannotator

    Reviews Renovate pull requests that bump GitHub Actions by checking pinned SHAs against upstream tags, scanning changelogs and confirming workflows stay compatible.

    9.2k GitHub stars~640 tokensUpdated yesterday
    DevelopmentAuto-check passed

  • Linea Dependency Maintenance

    Consensys-Incorporated/linea-attestation-registry

    Safely plan and execute dependency maintenance for JavaScript/TypeScript (npm, pnpm) and GitHub Actions, including npm lockfiles, pnpm workspaces, catalogs, overrides, SHA-pinned action versions…

    177 GitHub starsUsed in 1 repo~3.7k tokens
    DevelopmentAuto-check: warnings

  • Add To Dependabot CSV

    langfuse/langfuse

    Append GitHub Dependabot or Snyk/code-scanning alerts to an existing vulnerability CSV after verifying their API metadata.

    35k GitHub stars~1.5k tokensUpdated today
    DevelopmentAuto-check passed

More from github/gh-aw

All 52 skills in this repo

  • playwright-cli Browser Automation

    github/gh-aw

    Official

    Drives a real browser from the command line with playwright-cli to open pages, interact, mock requests, save state and work with Playwright tests.

    5.3k GitHub starsUsed in 23 repos~2.8k tokens
    Auto-check passed

  • Operational Value Designer

    github/gh-aw

    Official

    Designs and verifies a deterministic grader that measures whether a GitHub Agentic Workflow run reached its real-world or repository outcome.

    5.3k GitHub stars~6.8k tokensUpdated today
    Auto-check passed

  • Copilot Canvas Extension Author

    github/gh-aw

    Official

    Scaffolds, edits, reloads and debugs a canvas extension that the GitHub Copilot CLI can open in its side panel.

    5.3k GitHub stars~3.7k tokensUpdated today
    Auto-check passed

  • GitHub Copilot PR Finisher

    github/gh-aw

    Official

    Drives an open pull request to merge-ready from inside a GitHub Copilot cloud agent, resolving review threads and local checks concurrently, without merging or retriggering CI.

    5.3k GitHub stars~3.8k tokensUpdated today
    Auto-check: warnings

  • gh-aw Console Rendering Tags

    github/gh-aw

    Official

    Guide to the console struct tag system in gh-aw: headers, titles, number and cost formats, omitempty, and how structs, slices and maps render in the terminal.

    5.3k GitHub stars~736 tokensUpdated today
    Auto-check passed

  • Copilot PR Review Feedback

    github/gh-aw

    Official

    Guides an agent through collecting, planning, addressing and answering pull request review feedback, accepting only comments from Copilot, GitHub Actions and team members.

    5.3k GitHub stars~1.5k tokensUpdated today
    Auto-check passed

Works with

Categories

Questions about gh-aw Firewall Release Integrator

What does gh-aw Firewall Release Integrator do?

Bumps gh-aw's pinned gh-aw-firewall version, rebuilds generated artifacts, and flags upstream spec or schema changes that need follow-up work. It starts by reading the current version pins, recording the default firewall version and every minimum-version constant, then looks up the latest gh-aw-firewall release; if the tag already matches the pin, it reports that no bump is needed and only reviews release notes further if explicitly asked.

When should I use gh-aw Firewall Release Integrator?

gh-aw Firewall Release Integrator fits situations like: upgrading gh-aw to a newer gh-aw-firewall release; checking whether a firewall version bump needs follow-up spec changes; reviewing upstream schema changes against the local config code.

How do I install gh-aw Firewall Release Integrator in Claude Code?

Run `npx skills add github/gh-aw --skill awf-release-integrator -a claude-code`. Or copy the skill folder (.github/skills/awf-release-integrator in github/gh-aw) into .claude/skills/awf-release-integrator in your project. Claude Code loads it when a task matches its description.

How do I install gh-aw Firewall Release Integrator in Codex?

Run `npx skills add github/gh-aw --skill awf-release-integrator -a codex`. Or copy the skill folder (.github/skills/awf-release-integrator in github/gh-aw) into .agents/skills/awf-release-integrator in your project. Codex loads it when a task matches its description.

Can I use gh-aw Firewall Release Integrator in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add github/gh-aw --skill awf-release-integrator -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/awf-release-integrator, .gemini/skills/awf-release-integrator, .github/skills/awf-release-integrator and .opencode/skills/awf-release-integrator in your project.

What does gh-aw Firewall Release Integrator need to run?

Going by SKILL.md and its folder, gh-aw Firewall Release Integrator needs the command-line tools its instructions call (make). Our summary lists: A checkout of the gh-aw repository.

Does gh-aw Firewall Release Integrator access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is gh-aw Firewall Release Integrator safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does gh-aw Firewall Release Integrator use?

gh-aw Firewall Release Integrator is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does gh-aw Firewall Release Integrator use?

About 899 tokens (SKILL.md is roughly 3.6k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to gh-aw Firewall Release Integrator?

Skills that share tags, products or a category with gh-aw Firewall Release Integrator: Merge Dependabot PRs (onyx-dot-app/onyx, 32k stars), Update .NET OS Packages (dotnet/core, 22k stars), OBS Plugin Dependency Upgrade (sorayuki/obs-multi-rtmp, 5.1k stars) and Renovate Actions PR Review (backnotprop/plannotator, 9.2k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains gh-aw Firewall Release Integrator?

github (a GitHub organization, an official publisher) maintains it in github/gh-aw, which has 5,350 GitHub stars. The repository holds 52 skills in this directory. The repository was last updated on October 7, 2026.

Source: github/gh-aw on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.