When any task requires GitHub operations (PRs, issues, releases, checks, etc.), you MUST use the gh CLI.
If gh CLI is not authenticated or not available, you MUST:
gh CLI authentication is requiredgh auth login before continuingThe following fallbacks are STRICTLY FORBIDDEN when gh is unavailable or unauthenticated:
WebFetch to scrape GitHub URLscurl against the GitHub API directlyWebSearch to find PR/issue informationgh CLIBefore any gh command, if you are unsure about authentication status, run:
gh auth status
If the output indicates the user is not logged in, STOP and prompt:
ghCLI is not authenticated. Please rungh auth loginand try again.
# gh not authenticated → STOP
User: Please review PR #123
Assistant: gh CLI is not authenticated. Please run `gh auth login` first, then retry.
[Session stops — no fallback attempted]
Falling back to WebFetch or other HTTP-based access when gh is unavailable silently bypasses authentication and can expose unintended behavior. Stopping and prompting ensures credentials are properly configured before any GitHub interaction.