Apply GitHub repository security protections tier by tier — rulesets, read-only Actions token, secret scanning + push protection, Dependabot, and (gated) required status checks / required PR with a GitHub App bypass for a CI auto-commit bot. Mutating and confirmation-gated: always assess first, apply the no-regret baseline, then decide required checks separately.
安装
npx skills add pjt222/agent-almanac --skill harden-github-repo-securitynpx skills add pjt222/agent-almanac --skill harden-github-repo-security -a claude-code -gnpx skills add pjt222/agent-almanac --skill harden-github-repo-security -a codex -ggemini skills install https://github.com/pjt222/agent-almanac.git --path skills/harden-github-repo-securitygh skill install pjt222/agent-almanac harden-github-repo-securitygit clone --depth 1 https://github.com/pjt222/agent-almanac /tmp/pjt222__agent-almanac
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/pjt222__agent-almanac/skills/harden-github-repo-security ~/.claude/skills/harden-github-repo-security # Claude Code
cp -R /tmp/pjt222__agent-almanac/skills/harden-github-repo-security ~/.agents/skills/harden-github-repo-security # Codex, Cursor, Gemini CLI, Copilot, OpenCode