Onboard a repo

GitHub triage

Triages issues and pull requests into something a maintainer can work through.

Installation

$ npx skills add trailofbits/skills

The CLI's unit is the repository, so this installs everything in trailofbits/skills, not github-triage alone. It writes into whichever agent directories it finds — Claude Code, Codex, Cursor, Copilot, Windsurf, Zed.

Summary

Triages issues and pull requests into something a maintainer can work through.

  • Reach for it when an issue tracker that has stopped being read because it is too long.
  • Spans Ship and Operate & maintain, so it is usually worth loading for the whole piece of work rather than at one moment in it.
  • Stack-agnostic — nothing in it assumes a particular language or framework.
  • Published by Trail of Bits. Well regarded, but not the vendor of the thing it covers.
  • Installing pulls the whole trailofbits/skills repository: this catalogue lists 12 other entries from it, and the repo may hold more.

Where it sits in delivery

ShipBranches, pipelines, releases and the deploy itself.Everything in Ship →
Operate & maintainProduction reality: debugging, performance, instrumentation, and writing down why the system is the way it is.Everything in Operate →

The agent itself

The full text lives with its publisher and changes when they change it. Read it there rather than here — a mirrored copy of somebody else's procedure goes stale silently, and this page would have no way of telling you.

github.com/trailofbits/skillsSKILL.md, source, licence, issues and history ↗

Related

More in Ship