github-triage
An agent skill by trailofbits, from trailofbits/skills. Tags: analysis, automation, developer-tools, github, priority.
What it does
Triages a repository's open GitHub issues and pull requests via the gh CLI. Optionally reviews and merges ready PRs — incrementally merging passing automated/bot PRs and maintainer-approved ones, and spawning review subagents for never-reviewed ones — then closes already-resolved issues with comments citing the resolving PR or commit, cross-links issues with their pending fix PRs, and assigns local-only priority and change-size estimates for everything outstanding. Use when triaging, grooming, or reviewing a repository's open issues and PRs.
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add trailofbits/skills --skill github-triageOr copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/trailofbits/skills
cp -r skills/plugins/github-triage/skills/github-triage ~/.claude/skills/github-triageSafety box score
Not rated yet. A safety box score grades what a skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. Anyone can request one from this page; it is saved for everyone. How the score works.
Source
- Repository
- trailofbits/skills (all skills from this repository)
- Path
- plugins/github-triage/skills/github-triage/SKILL.md
- Branch
- main
- Collection
- github-triage
- Updated
- 2026-09-19
Related skills
- pr-improver — Runs an autonomous review-and-fix improvement loop over the current branch's changes until a PR review comes back clean.
- sarif-parsing — Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners.
- second-opinion — Gets independent code reviews from Codex or Antigravity for uncommitted changes, branch diffs, and commits.
- slicing-code-context — Selects bounded, graph-informed source slices with Trailmark and delegates focused code analysis or patch-proposal work to a smaller subagent.
- provision-cloud-agent — Provision an always-on cloud-hosted coding agent: pick a host platform (Railway or AWS EC2; pluggable for Fly.io, …).
- c-review — Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities.