Skip to main content
skill CX Codex

github-triage · trailofbits — Claude Code skill: GitHub issue triage and setup

This skill reviews a repository’s open GitHub issues and pull requests, links pending fixes to issues, and prepares local priority and change-size estimates.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓
npx skills add trailofbits/skills --skill github-triage -a claude-code
Open on GitHub

What github-triage does

Using gh, the skill gathers open issues and pull requests, then checks for links between them and recently merged work. It can propose closing an issue when a merged PR or a commit on the default branch provides evidence that the work is done.

For pull requests, it considers review, merge, and CI status. Proposed merges, issue closures, and comments are shown to the user for approval before any GitHub write takes place. Priority and change-size estimates stay local; they are not posted to GitHub.

An authenticated gh CLI is required. The skill also checks the current Git repository and its remotes to select a GitHub repository. It will not merge a PR without the user’s explicit approval.

What it helps with

  • find issues already resolved by a merged PR or commit
  • connect an open issue with the PR that is meant to fix it
  • rank outstanding work with local priority and size estimates
  • review open PR status before deciding whether to merge

Example prompts for the agent

  • Run /github-triage and review this repository’s open issues and PRs.
  • Find open issues that have already been resolved by merged work.
  • Review the open PRs first, show me proposed actions, and wait for my approval.

How to install github-triage

1Skills CLI (Vercel)

npx skills add trailofbits/skills --skill github-triage -a claude-code

2Manually: put the files in place

~/.claude/skills/github-triage/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/github-triage/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about github-triage

How do I install github-triage in Claude Code?

Run npx skills add trailofbits/skills --skill github-triage -a claude-code. The skill file is at ~/.claude/skills/github-triage/SKILL.md.

What does github-triage do?

It examines open GitHub issues and pull requests, finds links between outstanding work and fixes, and presents possible next steps. GitHub changes require user approval.

Does github-triage need an authenticated gh CLI?

Yes. The skill checks gh authentication before proceeding. If the Git remotes do not identify a single GitHub repository, it asks the user to choose one.

Similar skills

All skills for Git and GitHub →

github-triage by other authors comes first.

From the same set77

trailmark-review-gate The skill runs structural security gates on branches or pull requests using Trailmark graph diffs. It flags removed auth checks, newly reachable sinks, and expanded attack surfaces. CX Codex +1 1,300installs trailmark-variant-neighborhood This skill expands a suspected vulnerability into related code locations for review. Use it before variant analysis, Semgrep, static analysis, or a manual audit. CX Codex +1 1,300installs trailmark-finding-triage Builds a graph evidence packet for a single security finding: reachability, entrypoint paths, taint and blast radius. Useful before you spend time on a PoC. CX Codex +1 1,300installs slicing-code-context Extracts bounded, graph-informed source code slices via Trailmark and delegates analysis to a smaller subagent. Useful when running focused tasks on local or constrained models. CX Codex +1 1,300installs open-sourcing Walks a repository through the pre-release checklist: secret audit, license, docs, CI and packaging. CX Codex +1 1,300installs modern-cpp Directs C++ development toward C++20/23/26 idioms, replacing dangerous raw pointers, legacy macros, and SFINAE boilerplate with memory-safe patterns. CX Codex +1 1,200installs writing-lean-proofs Guides Lean 4 proof writing and review using Mathlib conventions. Use it when formalising theorems, restructuring tactic code, or adding project checks. CX Codex +1 1,200installs goal-prompt Generates copy-paste /goal directives for Claude Code and Codex with verified stop conditions and invariant checks. CX Codex +1 1,100installs

Project sponsors

Companies that keep this analytics open
Gold sponsor

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor