Github Triage
Triages a repository's open GitHub issues and pull requests via the gh CLI.
Install
npx skills add trailofbits/skills --skill github-triage -g -a claude-code -y- Repository
- trailofbits/skills7.9k
- Category
- Git and review
- Updated
- 7d ago
- License
- CC-BY-SA-4.0
- Context cost
- Mediumabout 3,000 tokens
- Runs scripts
- Yes, review before use
What it does
Triages a repository's open GitHub issues and pull requests via the gh CLI. Optionally reviews and merges ready PRs, incrementally merging passing automated/bot PRs and maintainer-approved ones, and spawning review subagents for never-reviewed ones, then closes already-resolved issues with comments citing the resolving PR or commit, cross-links issues with their pending fix PRs, and assigns local-only priority and change-size estimates for everything outstanding. Use when triaging, grooming, or reviewing a repository's open issues and PRs.
GitHub Triage
Triage a repository's open GitHub issues and pull requests. Optionally clear ready PRs first (merge passing bot PRs and maintainer-approved PRs, review never-reviewed ones), then close issues that are already resolved (with a comment citing the PR or commit that resolved them), make sure issues and the pending PRs that fix them reference each other, and assign a local-only priority and change-size estimate to every issue that is still outstanding.
When to Use
- When the user runs
/github-triageto groom or review a repository's open issues and pull requests. - When an issue backlog has drifted: resolved work left open, fixes landed without closing their issues, or PRs in flight that never linked their issue.
- When ready PRs have piled up (passing dependency bumps, approved-and-green PRs) or PRs are sitting unreviewed.
When NOT to Use
- Do not invoke automatically. This skill performs irreversible GitHub writes (merging PRs, closing issues, posting comments) and runs only on explicit invocation.
- Do not use to apply priority/effort labels on GitHub. Priority and size are presented locally only and are never posted (see Safety Rules).
- Do not use as a substitute for a human's final merge decision, every merge is proposed for explicit approval, never performed autonomously.
Core Principles
- Writes are gated. Compute the full triage first, present every proposed write, merges included, for review, and execute nothing until the user approves.
- Evidence before closing. Never close an issue without a concrete, cited reason (a merged PR or a commit on the default branch). When evidence is weak or ambiguous, leave the issue outstanding and flag it for review.
- Priority and size stay local. They are an internal planning aid for the user, never written to GitHub.

