GitHub CLI

brew install gh. The agent uses it to open PRs, read reviews, check CI, and manage issues. Run /install-github-app to add Claude reviews to a repository.

Team rules worth setting:

• What bots may do: bots may post review comments. They may auto-merge only behind required checks and approvals
• PR templates and labels so agent-created PRs carry the same context as human ones: summary, test plan, risk
• Scoped tokens: bot and app tokens get access only to the repos they need. A leaked org-wide token is an org-wide incident