タグ：github

Reviews pull requests with several parallel subagents, scores each finding by confidence to filter out false positives, and can post the results as PR comments. Official Anthropic plugin; requires a logged-in GitHub CLI.

GitHub's official CLI: manage pull requests, issues, releases and Actions workflows from the terminal. Most commands support --json output that agents can parse, and an official agent skill is available. Run gh auth login first.

GitHub's official MCP server: lets agents read and write repositories and code, manage issues and pull requests, and check Actions workflows and code-scanning alerts. Use the hosted remote server or run it locally in Docker; needs a personal access token or OAuth.

Git commit commands: /commit writes messages in the repo's style, /commit-push-pr branches, commits, pushes and opens a PR in one step (needs the gh CLI), and /clean_gone removes local branches deleted on the remote. Official Anthropic plugin.

GitHub's official spec-driven development toolkit: the specify CLI sets up spec, plan and task workflows for Copilot, Claude Code, Codex and other agents so the spec comes before the code, plus bug-fix and idea-evaluation flows. Needs Python 3.11+ and uv.

Runs GitHub Actions workflows locally in Docker, so you can test .github/workflows changes without repeated commits and pushes, or use workflows as a local task runner. Needs Docker installed.

Community collection under GitHub's official org: Copilot custom agents, instructions, skills, hooks and plugins. It's also the default plugin marketplace in Copilot CLI and VS Code; install with copilot plugin install. Content is third-party, so review before installing.

Community collection maintained under GitHub's official org with hundreds of skills following the Agent Skills spec, plus custom agents, instructions and plugins across many languages, frameworks and workflows. Content is third-party; install single skills with gh skills install.

Meeting minutes skill from GitHub's awesome-copilot: turns notes, transcripts or speech-to-text output into structured minutes with attendees, agenda, decisions and action items with owners and due dates, asking when details are missing. Best for internal meetings under an hour.

Community skill collection in GitHub's official repo: 400+ skills following the Agent Skills spec, covering codebase onboarding, testing, cloud and DevOps, agent security and more. Install individual skills with gh skills install.

Turns a new epic idea into a PRD: problem and goals, personas, user journeys, functional and non-functional requirements, success metrics and out-of-scope items, asking questions when information is missing, saved as Markdown. From GitHub's awesome-copilot collection.

Writes product requirement docs for software and AI features: first asks about the problem, success metrics and constraints, then outputs an executive summary, user stories, technical specs and risk analysis with measurable requirements. From GitHub's awesome-copilot community library.

Connects GitHub's official remote MCP server to manage issues and PRs, review code, search repos and call the GitHub API from Claude Code. Requires GITHUB_PERSONAL_ACCESS_TOKEN.

Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.

GitHub's official terminal coding agent, sharing its harness with the Copilot coding agent and shipping with the GitHub MCP built in. Work with repos, issues and PRs in natural language, approving each action before it runs. Requires a Copilot subscription.

Free remote MCP service that turns any GitHub repo or GitHub Pages site into a docs endpoint, so agents can read up-to-date docs and search code on demand and hallucinate fewer APIs. No sign-up or install; self-hosting is also possible.

Spec-driven project management for software: guides brainstorming into a PRD, breaks it into epics and dependent tasks synced as GitHub Issues, answers standup, next-step and blocker questions, and can dispatch several agents to code in parallel. Needs Git, an authenticated gh CLI and a GitHub repo.

Trail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks.

Static security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings.

GitHub's official gh extension for writing Actions workflows in Markdown that AI agents execute, compiled into standard Actions. Choose engines like Copilot, Claude Code or Codex; runs in a read-only sandbox by default. Requires gh.

Creates or updates a pull request description that explains why the change exists in one sentence, flags up to three things to note, and outlines the implementation with diff-style file, component and call trees. Uses the GitHub CLI; runs only when invoked by name.

Draws a code change or part of a codebase as an animated architecture or data-flow diagram. The agent writes a JSON graph, validates and renders it to SVG with the PR Lens CLI, then pushes it to a prlens.dev canvas or attaches it to a GitHub, GitLab or Bitbucket pull request.

Manages stacked branches and dependent pull requests with the gh stack GitHub CLI extension: splits work into layered branches with one PR each, then handles push, submit, sync, rebase and merge, using flags that keep commands non-interactive for agents. Official GitHub skill.

One plugin bundling skills and subagents for deep research, fixing GitHub issues and reviewing PRs, Codex handoff, Gemini or GPT image generation, translation and YouTube transcript extraction, plus settings.json templates for various providers (manual setup). Some skills need API keys.