🧰 gh CLI

The items that name it 3

• Beyond MCP: The New Security Playbook for Coding Agents | Blog | Endor Labs
  articleas affected products2026-07-21

  alternative to MCP for interacting with GitHub

• Malicious Skills & Supply Chain Risks in Coding Agents
  articleas tools2026-05-14

  GitHub command-line tool; abused in the Clawsights attack via 'gh auth token' to retrieve the user's GitHub auth token, and legitimately used in dynamic context examples (e.g. 'gh pr diff', 'gh pr view --comments') to pull live PR data into skills.

• Shai-Hulud-2.0-Detector — npm supply-chain compromise scanner
  repoas tools

  GitHub CLI used to check for unauthorized self-hosted runners named SHA1HULUD via 'gh api repos/{owner}/{repo}/actions/runners'.

In every workspace you can read 5