GitHub PAT

7w4.net提供免費和付費技能下載。

Interact with GitHub using Personal Access Tokens. User controls access via PAT scopes.

Setup

User provides their PAT:

1. Create PAT at github.com/settings/tokens
2. Select scopes (repo for full, public_repo for public only)
3. Provide token to agent

Store in TOOLS.md or pass via --token.

Commands

# List repos you have access to
python3 scripts/gh.py repos [--token TOKEN]

# Clone a repo
python3 scripts/gh.py clone owner/repo [--token TOKEN]

# Create branch
python3 scripts/gh.py branch <branch-name> [--repo owner/repo]

# Commit and push
python3 scripts/gh.py push "<message>" [--branch branch] [--repo owner/repo]

# Open a pull request
python3 scripts/gh.py pr "<title>" [--body "description"] [--base main] [--head branch]

# Create an issue
python3 scripts/gh.py issue "<title>" [--body "description"] [--repo owner/repo]

# View repo info
python3 scripts/gh.py info owner/repo

Security Model

• User controls access via PAT scopes
• No OAuth - no "allow full access" prompts
• Least privilege - user creates PAT with minimal needed scopes
• Fine-grained PATs supported for specific repo access

Token Storage

Agent stores token in TOOLS.md under ### GitHub section. Never expose in logs or messages.

這個 Skill 整體質量不錯，功能覆蓋了常用的 GitHub 操作，文件寫得清楚明白，用起來比較順手。它的安全設計理念很好——用個人訪問令牌代替全賬號授權，讓你可以精確控制權限。不過它有個明顯的短板：clone 和 push 時你的令牌會直接出現在命令裡，有洩露風險。功能上基本夠用，但如果你對安全性要求較高，可能需要等作者修復這個問題後再使用。總體來說是可用但不夠完善的工具。