Agent skill

GitHub Workflow

by transilienceai in transilienceai/communitytools

GitHub workflow automation — branching, committing, pushing, pull requests, issues, and code review.

MITAuto-check: notesDevelopment

Install GitHub Workflow

skills CLI
$ npx skills add transilienceai/communitytools --skill github-workflow -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install transilienceai/communitytools github-workflow --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/transilienceai/communitytools.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/github-workflow .claude/skills/github-workflow && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
github-workflow
GitHub stars
559
Token cost
~812 tokens
SKILL.md length
225 words
Files
4
Skills in repo
35
Repo updated
First seen
Licence
MIT

At a glance

GitHub workflow automation — branching, committing, pushing, pull requests, issues, and code review.

  • Works in 6 steps: Branching → Committing → Pushing → …
  • Asked to commit
  • SKILL.md covers Quick Start, Workflows, Reference and Critical Rules
  • Calls git and gh

What it does

GitHub Workflow is an agent skill from transilienceai/communitytools. GitHub workflow automation — branching, committing, pushing, pull requests, issues, and code review. Use when asked to commit, push, create PRs/branches/issues, or manage git workflow.

Its SKILL.md is about 810 tokens, which your agent loads only when the skill is triggered. The skill folder holds 4 other files (for example `reference/branch-strategy.md`, `reference/commit-conventions.md` and `reference/pr-workflow.md`).

It sits in Development, covering Git workflow, Pull requests and Code review. It works with GitHub Actions and Git. The repository describes itself as: Open-source Claude Code skills, agents, and slash commands for AI-powered penetration testing, bug bounty hunting, and security research. The licence is MIT.

When your agent uses it

  • Asked to commit
  • Create PRs/branches/issues
  • Manage git workflow

Example prompts

  • “/github-workflow”

Workflow steps

6 steps, taken from the step headings in SKILL.md.

  1. Branching
  2. Committing
  3. Pushing
  4. Pull Requests
  5. Issues
  6. Code Review

What it can do on your machine

Read from SKILL.md and the folder at commit 95fdc12. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • git
    • gh

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use git and gh, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

GitHub Workflow loads about 812 tokens when it runs. Until then it costs about 50 tokens; SKILL.md has 225 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~50
When it runs · the whole SKILL.md, loaded when a task matches
~812

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NoteMentions a .env fileSKILL.md:42
    - Never commit `.env`, credentials, or secrets
  • NoteMentions a .env fileSKILL.md:114
    - **NEVER** commit secrets, `.env` files, or credentials

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from transilienceai/communitytools at commit 95fdc12, republished under its MIT licence (© transilienceai). 225 words, ~812 tokens.

Download SKILL.mdSave it as .claude/skills/github-workflow/SKILL.md (or your agent's skills folder). This skill also uses 3 other files; get the full folder from GitHub.
name
github-workflow
description
GitHub workflow automation — branching, committing, pushing, pull requests, issues, and code review. Use when asked to commit, push, create PRs/branches/issues, or manage git workflow.

GitHub Workflow

Automate the full GitHub development lifecycle: branches, commits, pushes, PRs, issues, and code review.

Quick Start

  1. User requests a git action (commit, PR, branch, push, issue)
  2. Check repo state: git status, git branch, git log --oneline -5
  3. Execute the appropriate workflow below
  4. Confirm result to user

Workflows

1. Branching
bash
# Create feature branch from main
git checkout main && git pull origin main
git checkout -b <type>/<name>
# Types: feature/, bugfix/, docs/, refactor/, test/, chore/
  • Always branch from up-to-date main
  • Use conventional naming: feature/add-jwt-testing, bugfix/fix-port-detection
2. Committing
bash
# Stage specific files (never git add -A blindly)
git add <file1> <file2>
# Commit with conventional format
git commit -m "type(scope): description"
  • Types: feat, fix, docs, refactor, test, chore
  • Message focuses on why, not what
  • Never commit .env, credentials, or secrets
  • See reference/commit-conventions.md
3. Pushing
bash
# First push (set upstream)
git push -u origin <branch-name>
# Subsequent pushes
git push
  • Never force-push to main/master without explicit user approval
  • If push is rejected, git pull --rebase first
4. Pull Requests
bash
# Create PR linking to issue
gh pr create --title "Short title < 70 chars" --body "$(cat <<'EOF'
## Summary
- What changed and why

## Test plan
- [ ] How to verify

Fixes #<issue-number>
EOF
)"
5. Issues
bash
gh issue create --title "type: description" --body "$(cat <<'EOF'
## Problem
What needs to change

## Proposed solution
How to fix it

## Acceptance criteria
- [ ] Criteria 1
EOF
)"
6. Code Review
bash
# Review a PR
gh pr view <number>
gh pr diff <number>
gh pr checks <number>
# Comment or approve
gh pr review <number> --approve
gh pr review <number> --comment --body "feedback"

Reference

Critical Rules

  • NEVER force-push to main/master without explicit user approval
  • NEVER commit secrets, .env files, or credentials
  • NEVER use git add -A without reviewing what's staged
  • NEVER skip pre-commit hooks (--no-verify) unless user explicitly asks
  • NEVER amend published commits — create new commits instead
  • ALWAYS use conventional commit format: type(scope): description
  • ALWAYS link PRs to issues
  • ALWAYS check git status before committing
  • ALWAYS pull before pushing to avoid conflicts
  • ALWAYS create branches from up-to-date main

© transilienceai, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 3 other files in skills/github-workflow of transilienceai/communitytools.

  • SKILL.md
  • reference/branch-strategy.md
  • reference/commit-conventions.md
  • reference/pr-workflow.md

Open the folder on GitHubat commit 95fdc12

Compare with similar skills

GitHub Workflow next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

GitHub Workflow compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
GitHub Workflow this skilltransilienceai/communitytools559—~812Automated safety check: NotesMIT
Git GitHub Opsc5inco/compose-pokedexer143—~1.3kAutomated safety check: PassMIT
Git WorkflowEliasOulkadi/shokunin114—~2.4kAutomated safety check: NotesMIT
Git Workflow and Versioningaddyosmani/agent-skills102k2 repos~3.5kAutomated safety check: NotesMIT
React Router Pull Request Creatorremix-run/react-router57k—~2.5kAutomated safety check: PassMIT
Emoji Commit ConventionsbaptisteArno/typebot.io11k—~424Automated safety check: PassCustom licence

Similar skills

  • Git GitHub Ops

    c5inco/compose-pokedexer

    Handles Pokedexer Git and GitHub workflows: inspect changes, prepare commit messages, manage branches and pushes, and create or update issues and pull requests with safe file-based inputs.

    143 GitHub stars~1.3k tokensUpdated 4 days ago
    DevelopmentAuto-check passed
  • Git Workflow

    EliasOulkadi/shokunin

    Automate the complete Git development workflow — create feature branches with conventional naming, atomic commits with conventional commit messages, interactive rebase, squash merges, PR body…

    114 GitHub stars~2.4k tokensUpdated 2 days ago
    DevelopmentAuto-check: notes
  • Git Workflow and Versioning

    addyosmani/agent-skills

    Sets git habits for every change: short-lived branches, atomic commits with descriptive messages, clean pull requests, plus versioning, tagging and changelogs for releases.

    102k GitHub starsUsed in 2 repos~3.5k tokens
    DevelopmentAuto-check: notes
  • React Router Pull Request Creator

    remix-run/react-router

    Packages finished React Router work into a draft pull request: branch, commit, push, a written PR body and the right GitHub labels.

    57k GitHub stars~2.5k tokensUpdated today
    DevelopmentAuto-check passed
  • Emoji Commit Conventions

    baptisteArno/typebot.io

    Sets the repository's convention for commit messages and pull request titles: one emoji prefix for the main intent, a concise title and clean follow-up commits.

    11k GitHub stars~424 tokensUpdated yesterday
    DevelopmentAuto-check passed
  • Draft Pull Request Creator

    wordpress-mobile/WordPress-Android

    Commits and pushes current changes, writes a pull request title and body from the branch history and template, and opens a draft PR on GitHub after you approve it.

    3.2k GitHub stars~881 tokensUpdated today
    DevelopmentAuto-check: notes

More from transilienceai/communitytools

All 35 skills in this repo
  • Dfir

    transilienceai/communitytools

    Digital forensics and incident response - Windows event log analysis, PCAP forensics, filesystem artifact analysis, AD attack detection, and timeline correlation.

    559 GitHub stars~1.5k tokensUpdated 2 mo ago
    Auto-check passed
  • Pci Secure Software

    transilienceai/communitytools

    Automated PCI Secure Software Standard (SSS) v2.0 readiness gap-assessment of an application from its source code and documentation.

    559 GitHub stars~1.8k tokensUpdated 2 mo ago
    Auto-check passed
  • Protect With Password

    transilienceai/communitytools

    Generate ONE strong password and apply it to each referenced file (PDF, Word, Excel, PowerPoint, or any type).

    559 GitHub stars~583 tokensUpdated 2 mo ago
    Auto-check passed
  • Skill Update

    transilienceai/communitytools

    Skill creation, update and management — generates skill directory structure, validates against best practices, enforces line count limits.

    559 GitHub stars~1.2k tokensUpdated 2 mo ago
    Auto-check passed
  • Source Code Scanning

    transilienceai/communitytools

    Security-focused source code review and SAST. An agent skill from transilienceai/communitytools.

    559 GitHub stars~1.2k tokensUpdated 2 mo ago
    Auto-check: notes
  • Transilience Report Style

    transilienceai/communitytools

    Generate a Transilience-branded PDF report (pentest, vuln assessment, compliance, threat intel) from a single findings JSON using the bundled ReportLab generator.

    559 GitHub stars~1.7k tokensUpdated 2 mo ago
    Auto-check passed

Categories

Questions about GitHub Workflow

What does GitHub Workflow do?

GitHub workflow automation — branching, committing, pushing, pull requests, issues, and code review. GitHub Workflow is an agent skill from transilienceai/communitytools. GitHub workflow automation — branching, committing, pushing, pull requests, issues, and code review.

When should I use GitHub Workflow?

GitHub Workflow fits situations like: asked to commit; create PRs/branches/issues; manage git workflow.

How do I install GitHub Workflow in Claude Code?

Run `npx skills add transilienceai/communitytools --skill github-workflow -a claude-code`. Or copy the skill folder (skills/github-workflow in transilienceai/communitytools) into .claude/skills/github-workflow in your project. Claude Code loads it when a task matches its description.

How do I install GitHub Workflow in Codex?

Run `npx skills add transilienceai/communitytools --skill github-workflow -a codex`. Or copy the skill folder (skills/github-workflow in transilienceai/communitytools) into .agents/skills/github-workflow in your project. Codex loads it when a task matches its description.

Can I use GitHub Workflow in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add transilienceai/communitytools --skill github-workflow -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/github-workflow, .gemini/skills/github-workflow, .github/skills/github-workflow and .opencode/skills/github-workflow in your project.

What does GitHub Workflow need to run?

Going by SKILL.md and its folder, GitHub Workflow needs the command-line tools its instructions call (git and gh).

Does GitHub Workflow access the network?

SKILL.md contains no URLs. Its commands use git and gh, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is GitHub Workflow safe to install?

Our automated static check of SKILL.md found notes only (mentions a .env file), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.

What licence does GitHub Workflow use?

GitHub Workflow is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does GitHub Workflow use?

About 812 tokens (SKILL.md is roughly 3.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to GitHub Workflow?

Skills that share tags, products or a category with GitHub Workflow: Git GitHub Ops (c5inco/compose-pokedexer, 143 stars), Git Workflow (EliasOulkadi/shokunin, 114 stars), Git Workflow and Versioning (addyosmani/agent-skills, 102k stars) and React Router Pull Request Creator (remix-run/react-router, 57k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains GitHub Workflow?

transilienceai (a GitHub organization) maintains it in transilienceai/communitytools, which has 559 GitHub stars. The repository holds 35 skills in this directory. The repository was last updated on July 29, 2026.

Source: transilienceai/communitytools on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.