create-github-app — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited create-github-app (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Automate GitHub App creation for OpenSIN organization using browser automation.
Create GitHub Apps programmatically using webauto-nodriver browser automation. This skill automates the GitHub App creation flow that normally requires manual UI interaction.
anonymous skill loaded for browser automation toolsWhen the user asks to create a GitHub App, follow these steps:
Gather required information:
opnsin-codehttps://opensin.aihttp://92.5.60.87:5678/webhook/githubhttps://opensin.ai/auth/callback# Step 1: Navigate to GitHub Apps settings
goto({"url": "https://github.com/settings/apps/new"})
# Step 2: Fill form fields
# GitHub App name
observe_screen() # Find coordinates
click({"x": <name_field_x>, "y": <name_field_y>})
type_text({"text": "opnsin-code"})
# Homepage URL
press_key({"key": "Tab"})
type_text({"text": "https://opensin.ai"})
# Webhook URL (expand webhook section first)
press_key({"key": "Tab"})
press_key({"key": "Tab"}) # Navigate to webhook checkbox
press_key({"key": "Space"}) # Check webhook
press_key({"key": "Tab"}) # Move to webhook URL field
type_text({"text": "http://92.5.60.87:5678/webhook/github"})
# Webhook secret
press_key({"key": "Tab"})
type_text({"text": "<random-secret>"})
# Step 3: Configure permissions
# Scroll to permissions section
press_key({"key": "PageDown"})
# Repository permissions
# Use observe_screen to find permission toggles and click them
# Step 4: Subscribe to events
# Use observe_screen to find event checkboxes
# Step 5: Create the app
# Scroll to bottom and click "Create GitHub App"
observe_screen()
click({"x": <create_button_x>, "y": <create_button_y>})
# Step 6: Extract App ID and Client ID
# After creation, scrape the app settings page
observe_screen({"include_dom": "true"})After app is created:
observe_screen() before clicking to get current page state| Error | Recovery |
|---|---|
| Form validation error | Read error message, fix field, retry |
| Rate limit | Wait 60 seconds, retry |
| 2FA required | Prompt user for 2FA code |
| App name taken | Suggest alternative name |
User: "Create a GitHub App called @opnsin-code for OpenSIN-AI"
Agent:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.