gh-cli

Provides a comprehensive reference for using GitHub CLI to manage repositories, issues, pull requests, and more from the command line.

Install this skill

0/100

Security score

The gh-cli skill was audited on Jun 15, 2026 and we found 21 security issues across 6 threat categories, including 5 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

low line 35

Command substitution pattern

SourceSKILL.md

33	# Linux
34	curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \| sudo dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg
35	echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \| sudo tee /etc/apt/sources.list.d/github-cli.list > /dev/null
36	sudo apt update
37	sudo apt install gh

low line 2089

Command substitution pattern

SourceSKILL.md

2087	```bash
2088	# Run workflow and wait
2089	RUN_ID=$(gh workflow run ci.yml --ref main --jq '.databaseId')
2090
2091	# Watch the run

low line 2125

Command substitution pattern

SourceSKILL.md

2123	```bash
2124	# Add to ~/.bashrc or ~/.zshrc
2125	eval "$(gh completion -s bash)" # or zsh/fish
2126
2127	# Create useful aliases

low line 2152

Command substitution pattern

SourceSKILL.md

2150
2151	```bash
2152	export GH_TOKEN=$(gh auth token)
2153	```
2154

medium line 34

Curl to non-GitHub URL

SourceSKILL.md

32
33	# Linux
34	curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \| sudo dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg
35	echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \| sudo tee /etc/apt/sources.list.d/github-cli.list > /dev/null
36	sudo apt update

high line 669

Access to SSH directory

SourceSKILL.md

667
668	# Add deploy key
669	gh repo deploy-key add ~/.ssh/id_rsa.pub \
670	--title "Production server" \
671	--read-only

high line 1743

Access to SSH directory

SourceSKILL.md

1741
1742	# Add SSH key
1743	gh ssh-key add ~/.ssh/id_rsa.pub --title "My laptop"
1744
1745	# Add key with type

high line 1746

Access to SSH directory

SourceSKILL.md

1744
1745	# Add key with type
1746	gh ssh-key add ~/.ssh/id_ed25519.pub --type "authentication"
1747
1748	# Delete SSH key

high line 1762

Access to SSH directory

SourceSKILL.md

1760
1761	# Add GPG key
1762	gh gpg-key add ~/.ssh/id_rsa.pub
1763
1764	# Delete GPG key

low line 669