360 Secure SkillHub
360 安全技能中心

GitHub Interaction Developer Helper

该助手为开发者、维护者等提供GitHub安全交互支持,核心功能包括处理issue、PR、评审、CI等工作流,涵盖元数据获取、安全API/CLI操作、结果验证等环节。典型场景如PR摘要生成、issue分类、CI重跑自动化等。输入为GitHub相关需求,输出含工作流命令、可发布的PR评论、验证清单等,全程避免破坏性操作,保留贡献者上下文。

kyro-ma
kyro-ma
热度 16.02
最近更新 2026-06-23 12:34:19
分类:开发依赖:代码执行 / 第三方 API / 读写文件 / 内部调用大模型应用场景:代码审查 / 自动化脚本 / DevOps / 报告撰写 ...

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add software-data-github-interact-developer-helper-040526
Metadata
name
software-data-github-interact-developer-helper
description
Build reliable GitHub issue, pull request, review, and automation workflows with safe API usage, clear repository context, and reproducible local checks. Use when a user asks for GitHub, pull request, issue, review comments, CI, or needs practical workflow, code, checklist, documentation, or review support for this job.

GitHub Interaction Developer Helper

Purpose

Use this skill when a user needs to inspect or act on GitHub issues, PRs, checks, comments, branches, or repository files while preserving contributor intent and avoiding accidental destructive changes.

Audience: developers, maintainers, release engineers, and agent builders who automate GitHub work without losing review context.

Read references/requirement-plan.md when demand evidence, source links, scoring rationale, or review criteria are needed.

Workflow

  1. Identify the repository, target issue or PR, branch, permissions, desired action, and whether the operation is read-only or mutating.
  2. Fetch metadata first: title, body, labels, status, linked checks, changed files, review comments, and timeline context.
  3. For code changes, inspect the local worktree and existing user changes before editing.
  4. Choose the safest API path: GitHub app connector, gh CLI, REST/GraphQL call, or local git command, and record why.
  5. Verify results with tests, diff checks, status checks, or a second metadata fetch before posting comments or requesting review.
  6. Summarize exact GitHub state changes, links, remaining blockers, and anything intentionally left untouched.

Expected Outputs

  • A GitHub triage summary with concrete next actions.
  • Safe commands or API calls for issue, PR, branch, review, or CI workflows.
  • A scoped patch plan and verification checklist.
  • A concise comment or PR update ready to post.

Validation

  • Repository, PR/issue number, branch, and permission assumptions are explicit.
  • Mutating operations happen only after enough context has been fetched.
  • Local user changes are not reverted or overwritten.
  • The final state is verified through metadata, git diff, tests, or CI output.

Triggers

Keywords: GitHub, pull request, issue, review comments, CI, gh, repository automation

Example trigger sentences:

  • Use $software-data-github-interact-developer-helper to summarize this PR and its unresolved comments.
  • Automate a safe GitHub issue triage workflow for this repository.
  • Create commands for rerunning failed checks and reporting the result.