Checkout Credential Review

by github

Checkout Credential Review is a Quality skill for Claude Code, published by github in gh-aw.

4.9K stars495 forkson github/gh-awAdded 2026/08/16Repository updated 2026/08/16

View source on GitHub Download repo ZIP

actionscaiciclaude-codecodexcopilotgh-extensiongithub-actions

Install in seconds

Install Checkout Credential Review

Copy Checkout Credential Review into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/github/gh-aw/tree/main/.github/skills/checkout-credential-review ~/.claude/skills/checkout-credential-review

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/github/gh-aw.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: .github/skills/checkout-credential-review/SKILL.md in github/gh-aw
Installs to: ~/.claude/skills/checkout-credential-review
Collection: One of 25 skills cataloged from this repository
Category: Quality — 1354 skills

What Checkout Credential Review does

Checkout Credential Review helps review code that performs git or gh operations against repository checkouts, ensuring the right credentials are available at the right time and that sparseness, shallowness, and credential-free factors are considered.

Checkout Credential Review is cataloged under Quality on DirSkills. Checkout Credential Review comes from a repository tagged actions, cai, ci, claude-code and codex.

Documentation

README

Excerpt

Checkout Credential Review

Use this skill when reviewing or writing code in pkg/workflow/, actions/setup/js/, or compiled .lock.yml workflows that runs git, gh, or any other remote-touching operation against a repository checkout.

Background

Each entry in a workflow's checkout: block may declare its own credentials (github-token:, github-app:), and the compiler wires those into the corresponding actions/checkout step (pkg/workflow/checkout_step_generator.go). Generated checkouts always set persist-credentials: false, so the on-disk repo retains no credentials after the step finishes — only actions/checkout's own internal token is used during the clone, and it is scrubbed in its post-step.

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Checkout Credential Review

What else does github publish alongside Checkout Credential Review?
Checkout Credential Review is one of 25 skills that DirSkills catalogs from github/gh-aw, the repository it ships in. Its siblings there include AWF Release Integrator, Agent Session CLI and Agent Task CLI. Each one is a separate skill with its own page in this directory, installs the same way Checkout Credential Review does, and is maintained by github in that same repository. The rest of the collection is listed on the github/gh-aw page.
How does Checkout Credential Review compare to other Quality skills?
Checkout Credential Review ranks #304 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Checkout Credential Review against them. Open each page to compare what they document and how they install.