commit-push-pr skill missing gh pr list and gh repo view in allowed-tools
Resolved 💬 3 comments Opened Mar 20, 2026 by dougborg Closed May 4, 2026
Bug
The /commit-push-pr skill in the commit-commands plugin is missing gh pr list and gh repo view from its allowed-tools frontmatter.
File: plugins/commit-commands/commands/commit-push-pr.md
Current allowed-tools:
allowed-tools: Bash(git checkout --branch:*), Bash(git add:*), Bash(git status:*), Bash(git push:*), Bash(git commit:*), Bash(gh pr create:*)
Missing:
Bash(gh pr list:*)— the skill template usesgh pr list --head $(git branch --show-current)to detect the current branch's PRBash(gh repo view:*)— used to determineowner/repofor API calls
Without these, the skill either prompts the user for permission (if the commands happen to be allowed in user settings) or fails entirely.
Also missing (used in the skill template but not declared):
Bash(git branch:*)—git branch --show-currentBash(git diff:*)—git diff HEADBash(git log:*)—git logfor commit message style
Suggested fix
allowed-tools: Bash(git checkout --branch:*), Bash(git add:*), Bash(git status:*), Bash(git push:*), Bash(git commit:*), Bash(git diff:*), Bash(git log:*), Bash(git branch:*), Bash(gh pr create:*), Bash(gh pr list:*), Bash(gh repo view:*)
Note
Even with this fix, users will still be prompted because allowed-tools currently only restricts (doesn't auto-approve) — see #34419. But the tools should at least be declared so the skill is allowed to use them.
This issue has 3 comments on GitHub. Read the full discussion on GitHub ↗