github-triage SKILL.md skillA

github-triage from trailofbits/skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add trailofbits/skills/github-triage@git:20260729.65ecafa

Pins git:20260729.65ecafa in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
trailofbits/skills
Path
plugins/github-triage/skills/github-triage/SKILL.md
Versions recorded
1
Latest version
git:20260729.65ecafa, committed Jul 29, 2026
Size
23,191 bytes
Repository stars
7,951
License
CC-BY-SA-4.0

Triages a repository's open GitHub issues and pull requests via the gh CLI. Optionally reviews and merges ready PRs — incrementally merging passing automated/bot PRs and maintainer-approved ones, and spawning review subagents for never-reviewed ones — then closes already-resolved issues with comments citing the resolving PR or commit, cross-links issues with their pending fix PRs, and assigns local-only priority and change-size estimates for everything outstanding. Use when triaging, grooming…

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# GitHub Triage

Triage a repository's open GitHub issues and pull requests. Optionally clear ready
PRs first (merge passing bot PRs and maintainer-approved PRs, review never-reviewed
ones), then close issues that are already resolved (with a comment citing the PR or
commit that resolved them), make sure issues and the pending PRs that fix them
reference each other, and assign a **local-only** priority and change-size estimate
to every issue that is still outstanding.

## When to Use

- When the user runs `/github-triage` to groom or review a repository's open issues
  and pull requests.
- When an issue backlog has drifted: resolved work left open, fixes landed without
  closing their issues, or PRs in flight that never linked their issue.
- When ready PRs have piled up (passing dependency bumps, approved-and-green PRs) or
  PRs are sitting unreviewed.

## When NOT to Use

- Do not invoke automatically. This skill performs irreversible GitHub writes
  (merging PRs, closing issues, posting comments) and runs only on explicit invocation.
- Do not use to apply priority/effort *labels* on GitHub. Priority and size are
  presented locally only and are never posted (see Safety Rules).
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add trailofbits/skills/github-triage@sha256:b3289e800b7b5dc9

The line at the top of this page pins the label git:20260729.65ecafa, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_v34ulqte7ijf2t64.svg)](https://markdownregistry.com/a/art_v34ulqte7ijf2t64)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Jul 29, 2026.

versioncommittedcommitsizeaudit
git:20260729.65ecafa latest2026-07-29 65ecafa 23,191 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (23191 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

trailofbits/skills · 7,951 stars · license CC-BY-SA-4.0 · pushed 2026-10-28 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_v34ulqte7ijf2t64
GET https://markdownregistry.com/api/v1/resolve?ref=trailofbits/skills/github-triage
GET https://markdownregistry.com/api/v1/blob/b3289e800b7b5dc9c37c9de2768ca052ec7077dcf184d83d3d0c9f32a9fdd3cf

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from trailofbits/skills

AGENTS.md AGENTS.md file
trailofbits/skills · AGENTS.md
git:20260916.123037e · audit B · 7,951 stars
CLAUDE.md CLAUDE.md file
trailofbits/skills · CLAUDE.md
git:20260605.f09e5c7 · audit B · 7,951 stars
agentic-actions-auditor SKILL.md skill
trailofbits/skills · plugins/agentic-actions-auditor/skills/agentic-actions-auditor/SKILL.md · Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action…
git:20260831.9645e2f · audit A · 7,951 stars
audit-context-building SKILL.md skill
trailofbits/skills · plugins/audit-context-building/skills/audit-context-building/SKILL.md · Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it…
git:20260828.d1f1575 · audit A · 7,951 stars
algorand-vulnerability-scanner SKILL.md skill
trailofbits/skills · plugins/building-secure-contracts/skills/algorand-vulnerability-scanner/SKILL.md · Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees…
git:20260831.6feac67 · audit A · 7,951 stars
audit-prep-assistant SKILL.md skill
trailofbits/skills · plugins/building-secure-contracts/skills/audit-prep-assistant/SKILL.md · Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis…
git:20260825.32ad9e6 · audit A · 7,951 stars
cairo-vulnerability-scanner SKILL.md skill
trailofbits/skills · plugins/building-secure-contracts/skills/cairo-vulnerability-scanner/SKILL.md · Scans Cairo/StarkNet smart contracts for 6 critical vulnerabilities including felt252 arithmetic overflow, L1-L2…
git:20260831.6feac67 · audit A · 7,951 stars
code-maturity-assessor SKILL.md skill
trailofbits/skills · plugins/building-secure-contracts/skills/code-maturity-assessor/SKILL.md · Systematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for arithmetic safety…
git:20260825.32ad9e6 · audit A · 7,951 stars
cosmos-vulnerability-scanner SKILL.md skill
trailofbits/skills · plugins/building-secure-contracts/skills/cosmos-vulnerability-scanner/SKILL.md · Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund…
git:20260401.d7f76b5 · audit A · 7,951 stars
guidelines-advisor SKILL.md skill
trailofbits/skills · plugins/building-secure-contracts/skills/guidelines-advisor/SKILL.md · Smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate…
git:20260825.32ad9e6 · audit A · 7,951 stars
secure-workflow-guide SKILL.md skill
trailofbits/skills · plugins/building-secure-contracts/skills/secure-workflow-guide/SKILL.md · Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features…
git:20260825.32ad9e6 · audit A · 7,951 stars
solana-vulnerability-scanner SKILL.md skill
trailofbits/skills · plugins/building-secure-contracts/skills/solana-vulnerability-scanner/SKILL.md · Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing…
git:20260831.6feac67 · audit A · 7,951 stars

Every file in trailofbits/skills

Other files named github-triage

github-triage SKILL.md skill
code-yeongyu/oh-my-openagent · .opencode/skills/github-triage/SKILL.md · Read-only GitHub triage for issues AND PRs. 1 item = 1 background task (category: quick). Analyzes all open items and…
git:20260320.436ce71 · audit A · 70,648 stars
github-triage SKILL.md skill
code-yeongyu/oh-my-openagent · .agents/skills/github-triage/SKILL.md · Read-only GitHub triage for issues AND PRs. 1 item = 1 background task (category: quick). Analyzes all open items and…
git:20260513.2146071 · audit A · 70,648 stars
github-triage SKILL.md skill
amd/gaia · tests/fixtures/gaia/fixture_hub/sources/github-triage/SKILL.md · Triage GitHub work with the gh CLI — your unread notification inbox, or one repository's issue backlog. Groups what…
v2.1.0 · audit A · 1,601 stars
github-triage SKILL.md skill
amd/gaia · hub/skills/github-triage/SKILL.md · Triage GitHub work with the gh CLI — your unread notification inbox, or one repository's issue backlog. Groups what…
v2.2.0 · audit A · 1,601 stars
github-triage SKILL.md skill
maoyadongsh/siq-agent-security · skills/siq-agent-security/evals/fixtures/official-like/SKILL.md · Triage GitHub issues with the gh CLI.
v1.2.0 · audit C · 49 stars
github-triage SKILL.md skill
maoyadongsh/siq-agent-security · apps/agentshield/testdata/releases/siq-agent-security-v0.2.0/evals/fixtures/official-like/SKILL.md · Triage GitHub issues with the gh CLI.
v1.2.0 · audit C · 49 stars
github-triage SKILL.md skill
maoyadongsh/siq-agent-security · apps/agentshield/internal/admission/testdata/skills/benign/official-like/SKILL.md · Triage GitHub issues with the gh CLI.
v1.2.0 · audit C · 49 stars
github-triage SKILL.md skill
bendrucker/claude · user/skills/github-triage/SKILL.md · Clear Dependabot and bot noise from your GitHub notification inbox: mark settled merged and closed PRs done, merge…
git:20260708.03ef441 · audit A · 18 stars

Browse by kind, by grade A, or by owner.