Gh Cli

Inspect GitHub request-routing hooks and authenticated CLI prerequisites before enabling them.

Source owner: trailofbits · trailofbits/skills
Declared author / attribution: William Tan (manifest declaration)

Work with repositories →Configure workflows →

Package installedNot observed

External connectionNot observed

Access authorizedNot observed

Task completedNot observed

A source listing is not a check of your machine, account, permissions or result.

COMPOSITION

What is included

Partial inventory

These are declared contents or individually observed source files. Each row states its evidence scope; these are not separate installation recommendations.

Hooks

Observed hook configuration

Parsed event names: SessionStart, PreToolUse, SessionEnd. Event names are not action counts; no hook was executed.

Inspect sampled configuration

Exact member count not established.

DISTRIBUTION EVIDENCE

Marketplace entries and source pins

Manifest fields inspected. Independent maintainer marketplace. Marketplace curator: Trail of Bits. Curator identity is not package authorship or runtime certification.

gh-cli: d3323cefbcf645678b8dc481de204b02ad3d02dc
Package path: plugins/gh-cli

Inspect the exact marketplace snapshot

Manifest version 1.6.0 was observed separately at d3323cefbcf645678b8dc481de204b02ad3d02dc. Directory pointers do not establish a complete file inventory.

TASK-SCOPED PREREQUISITES

What you need to check

Required, optional and unknown describe the recorded workflow. They are not security or compatibility verdicts.

No complete prerequisite inventory was established from the recorded sources. This does not mean “no dependencies” or “no account needed.”

Make a local prerequisite note

Your notes stay in this page. They cannot establish authorization or task success.

EVIDENCE & CHANGE HISTORY

Version and sources

Recorded workflow-note version: 1.6.0
Source revision: d3323cefbcf645678b8dc481de204b02ad3d02dc
Observation date: 2026-09-08T13:38:55.248Z — not a release date or runtime test date
Declared target: Claude Code. Other interfaces remain unknown unless specifically documented.
Package license information: Root README declares CC-BY-SA-4.0. This is not a manifest license or file-level clearance; only original reference metadata is retained here.
Identity: gpa:plugin:0834353b86c4f8cc57ae81e251a6a829d0dc53f1ac0fff09360510efa747e728
Exact package root: https://github.com/trailofbits/skills / plugins/gh-cli

This snapshot has one recorded observation for this package. No earlier version or permission change is invented. A future source change requires a new reviewed observation before current relationships are carried forward.

Prepare a correction note

Compare for the same task

Copy and Markdown downloads retain source dates, prerequisites and recorded issues, without your personal notes. Compare recorded facts, not a global score. Different ecosystems remain different installations.