feat(skills): support private GitHub skill repos via env tokens （#120）#137
Open
chenanga wants to merge 2 commits intoSaladDay:mainfrom
Open
feat(skills): support private GitHub skill repos via env tokens （#120）#137chenanga wants to merge 2 commits intoSaladDay:mainfrom
chenanga wants to merge 2 commits intoSaladDay:mainfrom
Conversation
added 2 commits
April 28, 2026 12:09
Read GitHub tokens from environment variables when downloading skill repository archives, without persisting tokens in repo records. - keep SkillRepo storage limited to owner/name/branch/enabled - prefer repo-specific, owner-specific, and global skill token env vars - support GITHUB_TOKEN and GH_TOKEN fallback - use authenticated GitHub zipball downloads when a token is available - fall back to unauthenticated archive downloads for public repos - document private repo setup in English and Chinese READMEs
chenanga
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
#120
背景
当前 Skills 仓库配置只记录
owner/name/branch/enabled，公开仓库可以正常发现和安装，但私有 GitHub 仓库无法下载。这个 PR 增加通过环境变量提供 GitHub token 的能力，同时避免把 token 和 repo 配置持久绑定。变更内容
CC_SWITCH_SKILLS_GITHUB_TOKEN_OWNER_REPOCC_SWITCH_SKILLS_GITHUB_TOKEN_OWNERCC_SWITCH_SKILLS_GITHUB_TOKENGITHUB_TOKENGH_TOKENOWNER/REPO会转为大写，非字母数字字符转为_README.md和README_ZH.md中补充私有仓库配置说明本地验证通过