Operate safely and efficiently inside a gh-aw workflow with a restricted tools/bash allowlist, and correctly triage tool-denial events before they exhaust the session's denial budget.
Install
npx skills add github/gh-aw --skill restricted-tool-triagenpx skills add github/gh-aw --skill restricted-tool-triage -a claude-code -gnpx skills add github/gh-aw --skill restricted-tool-triage -a codex -ggemini skills install https://github.com/github/gh-aw.git --path .github/skills/restricted-tool-triagegh skill install github/gh-aw restricted-tool-triagegit clone --depth 1 https://github.com/github/gh-aw /tmp/github__gh-aw
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/github__gh-aw/.github/skills/restricted-tool-triage ~/.claude/skills/restricted-tool-triage # Claude Code
cp -R /tmp/github__gh-aw/.github/skills/restricted-tool-triage ~/.agents/skills/restricted-tool-triage # Codex, Cursor, Gemini CLI, Copilot, OpenCode