MCPInstall

github

Interact with GitHub repositories, pull requests, issues, and workflows using the GITHUBTOKEN environment variable and GitHub CLI. Use when working with code hosted on GitHub or managing GitHub resources.

Installs
78
Last 24h
—
Trending rank
—
Security
Not audited

Install

Works with every agent the skills CLI supports.

npx skills add https://github.com/openhands/extensions --skill github
  1. 01

    Install

    Run the command in your project. The CLI asks which agents to install for.

  2. 02

    Describe the task

    Ask your agent for something this skill covers. It loads github automatically when relevant.

  3. 03

    Review the result

    The agent follows the SKILL.md steps, scripts and references bundled with the skill.

SKILL.md

The instructions your agent reads when the skill is triggered.

Connection selection

Use authenticated GitHub MCP tools first when they are available in the agent's environment. Detect this by tool availability, without depending on a particular MCP server name. Use the token and direct API instructions below only when GitHub MCP tools are unavailable or when raw API or curl access is explicitly needed.

You have access to an environment variable, GITHUB_TOKEN, which allows you to interact with the GitHub API.

<IMPORTANT> You can use `curl` with the `GITHUB_TOKEN` to interact with GitHub's API. ALWAYS use the GitHub API for operations instead of a web browser. ALWAYS use the `create_pr` tool to open a pull request If the user asks you to check GitHub Actions status, first try to use `gh` to work with workflows, and only fallback to basic API calls if that fails. Examples: - `gh run watch` (https://cli.github.com/manual/gh_run_watch) to monitor workflow runs - `gh pr checks 200 --watch --interval 10` to check until completed. </IMPORTANT>

Windows PowerShell equivalents for the multi-line shell snippets below are in references/windows.md.

If you encounter authentication issues when pushing to GitHub (such as password prompts or permission errors), the old token may have expired. In such case, update the remote URL to include the current token: git remote set-url origin https://${GITHUB_TOKEN}@github.com/username/repo.git

Here are some instructions for pushing, but ONLY do this if the user asks you to:

  • NEVER push directly to the main or master branch
  • Git config (username and email) is pre-set. Do not modify.
  • You may already be on a branch starting with openhands-workspace. Create a new branch with a better name before pushing.
  • Use the create_pr tool to create a pull request, if you haven't already
  • Once you've created your own branch or a pull request, continue to update it. Do NOT create a new one unless you are explicitly asked to. Update the PR title and description as necessary, but don't change the branch name.
  • Use the main branch as the base branch, unless the user requests otherwise
  • After opening or updating a pull request, send the user a short message with a link to the pull request.
  • Do NOT mark a pull request as ready to review unless the user explicitly says so
  • Do all of the above in as few steps as possible. E.g. you could push changes with one step by running the following bash commands:
git remote -v && git branch # to find the current org, repo and branch
git checkout -b create-widget && git add . && git commit -m "Create widget" && git push -u origin create-widget

Merging Pull Requests (async merge API)

IMPORTANT: Only merge if the user asks you to, without ambiguity.

GitHub released an async merge API in October 2026; it is now the recommended way to merge PRs programmatically, and the only merge API that supports stacked PRs. It can also add a PR to a merge queue. Prefer it over PUT .../pulls/{n}/merge and the GraphQL mergePullRequest mutation. A GitHub MCP merge tool may still use the older synchronous endpoint; for stacked PRs or merge queues, use the calls below. Docs: https://docs.github.com/en/rest/pulls/pulls#merge-a-pull-request-asynchronously

  1. Request the merge (merge_action: default uses the merge queue if the branch has one, else merges directly; or direct_merge / merge_queue). merge_method, commit_title and commit_message apply only to direct merges:
gh api -X PUT repos/<OWNER>/<REPO>/pulls/<PR_NUMBER>/merge-async -f merge_method=squash -f sha=<HEAD_SHA>
  1. A 202 returns details.uuid; poll it every few seconds until status is no longer pending:
gh api repos/<OWNER>/<REPO>/pulls/<PR_NUMBER>/merge-async/<UUID>

Final status is merged, enqueued (added to the merge queue, NOT merged yet), or failed (see details.message). A 200 on the PUT means the PR is already merged or queued; a 409 means a merge request is already pending (its UUID is returned).

Handling Review Comments

  • Critically evaluate each review comment before acting on it. Not all feedback is worth implementing:
    • Does it fix a real bug or improve clarity significantly?
    • Does it align with the project's engineering principles (simplicity, maintainability)?
    • Is the suggested change proportional to the benefit, or does it add unnecessary complexity?
  • It's acceptable to respectfully decline suggestions that add verbosity without clear benefit, over-engineer for hypothetical edge cases, or contradict the project's pragmatic approach.
  • After addressing (or deciding not to address) inline review comments, mark the corresponding review threads as resolved.
  • Before resolving a thread, leave a reply comment that either explains the reason for dismissing the feedback or references the specific commit (e.g., commit SHA) that addressed the issue.
  • Prefer resolving threads only once fixes are pushed or a clear decision is documented.
  • Use the GitHub GraphQL API to reply to and resolve review threads (see below).
  • After making changes to a PR, verify the title and description still match the content. Update them if the scope, features, or intent changed.

Resolving Review Threads via GraphQL

To resolve existing review threads programmatically:

  1. Get the thread IDs (replace <OWNER>, <REPO>, <PR_NUMBER>):
gh api graphql -f query='
{
  repository(owner: "<OWNER>", name: "<REPO>") {
    pullRequest(number: <PR_NUMBER>) {
      reviewThreads(first: 20) {
        nodes {
          id
          isResolved
          comments(first: 1) {
            nodes { body }
          }
        }
      }
    }
  }
}'
  1. Reply to the thread explaining how the feedback was addressed:
gh api graphql -f query='
mutation {
  addPullRequestReviewThreadReply(input: {
    pullRequestReviewThreadId: "<THREAD_ID>"
    body: "Fixed in <COMMIT_SHA>"
  }) {
    comment { id }
  }
}'
  1. Resolve the thread:
gh api graphql -f query='
mutation {
  resolveReviewThread(input: {threadId: "<THREAD_ID>"}) {
    thread { isResolved }
  }
}'
  1. Get the failed workflow run ID and rerun it:
# Find the run ID from the failed check URL, or use:
gh run list --repo <OWNER>/<REPO> --branch <BRANCH> --limit 5

# Rerun failed jobs
gh run rerun <RUN_ID> --repo <OWNER>/<REPO> --failed

FAQ

What does the github skill do?

Interact with GitHub repositories, pull requests, issues, and workflows using the GITHUBTOKEN environment variable and GitHub CLI. Use when working with code hosted on GitHub or managing GitHub resources.

How do I install github?

Run npx skills add https://github.com/openhands/extensions --skill github in your project. The skills CLI detects the agents you use and copies the skill into the right folder. For Claude Code you can also place the skill folder at ~/.claude/skills/github/ (personal) or .claude/skills/github/ (project).

Which AI agents can use github?

Any agent that supports the open Agent Skills format (a folder with a SKILL.md file), including Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, Windsurf, Cline, OpenCode and more.

Is github safe to install?

No partner security audit is available yet. Skills can run commands and scripts, so read the SKILL.md and any bundled files before installing.

Who maintains github?

It is published by openhands in openhands/extensions. It has 78 recorded installs.

More from openhands/extensions

View all →

ssh

openhands/extensions

Establish and manage SSH connections to remote machines, including key generation, configuration, and file transfers. Use when connecting to remote servers, executing remote commands, or transferring files via SCP.

1.2K installs

code-review

openhands/extensions

Open the skill to read its SKILL.md instructions.

docker

openhands/extensions

Open the skill to read its SKILL.md instructions.

DevOps & Cloud121 installs

codereview-roasted

openhands/extensions

Open the skill to read its SKILL.md instructions.

119 installs

jupyter

openhands/extensions

Open the skill to read its SKILL.md instructions.

108 installs

security

openhands/extensions

Open the skill to read its SKILL.md instructions.

Security98 installs

Popular other skills

View category →

hyperframes-cli

heygen-com/hyperframes

The HyperFrames CLI by job - scaffold, check, look at frames, edit the timeline, preview, render locally or in the cloud, publish, project history - plus reading its JSON and recovering from build or render failures.

1.3M installs

triage

mattpocock/skills

Move issues and external PRs through a state machine of triage roles, categorise, verify, grill if needed, and write agent-ready briefs.

1M installs

ask-matt

mattpocock/skills

Ask which skill or flow fits your situation. A router over the skills in this repo.

778.4K installs

to-questionnaire

mattpocock/skills

Turn a decision you can't fully answer into a questionnaire for someone else to fill in.

508.9K installs

wait-what

mattpocock/skills

Stop. That last message did not land: re-pitch it.

459.7K installs

loop-me

mattpocock/skills

Grill me about specs for the workflows I want to build, within this workspace.

447.9K installs