wip-repo-permissions-hook

Enforce private repository requirements before making repositories public.

3|Updated Feb 28, 2026
One-click install
npx skills add https://github.com/wipcomputer/wip-ai-devops-toolbox --skill wip-repo-permissions-hook
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: wip-repo-permissions-hook
Source: https://github.com/wipcomputer/wip-ai-devops-toolbox/tree/main/tools/wip-repo-permissions-hook
Command: npx skills add https://github.com/wipcomputer/wip-ai-devops-toolbox --skill wip-repo-permissions-hook

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires @wipcomputer/wip-repo-permissions-hook, @modelcontextprotocol/sdk, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill prevents accidental exposure of sensitive internal development context by ensuring that public repositories always have a corresponding private repository.

Core Features & Use Cases

  • Visibility Enforcement: Automatically blocks attempts to make a repository public if a -private counterpart does not exist.
  • Audit Capabilities: Allows for auditing all public repositories within an organization to ensure compliance with the private counterpart rule.
  • Use Case: Before pushing a new feature branch to a public repository, this tool ensures that the corresponding -private repository exists, safeguarding internal notes, plans, and AI development artifacts.

Quick Start

Use the wip-repo-permissions skill to check if the repository wipcomputer/my-cool-project can be made public.

Frequently Asked Questions about wip-repo-permissions-hook

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent accidental public exposure of internal GitHub repository context?▼

To prevent accidental public exposure of internal GitHub repository context, this skill enforces a policy requiring a corresponding '-private' repository to exist before any repository can be made public, safeguarding internal development context.

How do I audit all public repositories in an organization for private counterpart compliance?▼

To audit public repositories for compliance, use the provided CLI commands to check individual repositories and audit entire organizations, ensuring every public repository has a required '-private' counterpart.

Can I integrate repository visibility checks as a hook into Claude Code or OpenClaw?▼

Yes, you can integrate repository visibility checks as a hook into AI development platforms like Claude Code and OpenClaw. It automatically blocks making a repository public if the '-private' counterpart does not exist.

Does this MCP tool support programmatic access for checking repository permissions?▼

Yes, the tool exposes its repository visibility enforcement functionality via MCP, allowing programmatic access to check if a repository can be made public based on the '-private' counterpart rule.

What happens if I try to make a GitHub repository public without a private counterpart?▼

If you try to make a GitHub repository public without a private counterpart, the visibility enforcement mechanism automatically blocks the attempt. This strict policy ensures internal development context is never accidentally exposed.

Why do I need a '-private' repository before making a repo public?▼

You need a '-private' repository before making a repo public to safeguard internal development context, such as internal notes, plans, and AI development artifacts. This separation prevents sensitive information from leaking into public repositories.