github-automation — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited github-automation (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Automate GitHub repository management, issue tracking, pull request workflows, branch operations, and CI/CD through Composio's GitHub toolkit.
RUBE_MANAGE_CONNECTIONS with toolkit githubRUBE_SEARCH_TOOLS first to get current tool schemasGet Rube MCP: Add https://rube.app/mcp as an MCP server in your client configuration. No API keys needed — just add the endpoint and it works.
RUBE_SEARCH_TOOLS respondsRUBE_MANAGE_CONNECTIONS with toolkit githubWhen to use: User wants to create, list, or manage GitHub issues
Tool sequence:
GITHUB_LIST_REPOSITORIES_FOR_THE_AUTHENTICATED_USER - Find target repo if unknown [Prerequisite]GITHUB_LIST_REPOSITORY_ISSUES - List existing issues (includes PRs) [Required]GITHUB_CREATE_AN_ISSUE - Create a new issue [Required]GITHUB_CREATE_AN_ISSUE_COMMENT - Add comments to an issue [Optional]GITHUB_SEARCH_ISSUES_AND_PULL_REQUESTS - Search across repos by keyword [Optional]Key parameters:
owner: Repository owner (username or org), case-insensitiverepo: Repository name without .git extensiontitle: Issue title (required for creation)body: Issue description (supports Markdown)labels: Array of label namesassignees: Array of GitHub usernamesstate: 'open', 'closed', or 'all' for filteringPitfalls:
GITHUB_LIST_REPOSITORY_ISSUES returns both issues AND pull requests; check pull_request field to distinguishper_page max 100; iterate pages until emptyWhen to use: User wants to create, review, or merge pull requests
Tool sequence:
GITHUB_FIND_PULL_REQUESTS - Search and filter PRs [Required]GITHUB_GET_A_PULL_REQUEST - Get detailed PR info including mergeable status [Required]GITHUB_LIST_PULL_REQUESTS_FILES - Review changed files [Optional]GITHUB_CREATE_A_PULL_REQUEST - Create a new PR [Required]GITHUB_CREATE_AN_ISSUE_COMMENT - Post review comments [Optional]GITHUB_LIST_CHECK_RUNS_FOR_A_REF - Verify CI status before merge [Optional]GITHUB_MERGE_A_PULL_REQUEST - Merge after explicit user approval [Required]Key parameters:
head: Source branch with changes (must exist; for cross-repo: 'username:branch')base: Target branch to merge into (e.g., 'main')title: PR title (required unless issue number provided)merge_method: 'merge', 'squash', or 'rebase'state: 'open', 'closed', or 'all'Pitfalls:
GITHUB_CREATE_A_PULL_REQUEST fails with 422 if base/head are invalid, identical, or already mergedGITHUB_MERGE_A_PULL_REQUEST can be rejected if PR is draft, closed, or branch protection appliesGITHUB_GET_A_PULL_REQUEST immediately before mergingWhen to use: User wants to create repos, manage branches, or update repo settings
Tool sequence:
GITHUB_LIST_REPOSITORIES_FOR_THE_AUTHENTICATED_USER - List user's repos [Required]GITHUB_GET_A_REPOSITORY - Get detailed repo info [Optional]GITHUB_CREATE_A_REPOSITORY_FOR_THE_AUTHENTICATED_USER - Create personal repo [Required]GITHUB_CREATE_AN_ORGANIZATION_REPOSITORY - Create org repo [Alternative]GITHUB_LIST_BRANCHES - List branches [Required]GITHUB_CREATE_A_REFERENCE - Create new branch from SHA [Required]GITHUB_UPDATE_A_REPOSITORY - Update repo settings [Optional]Key parameters:
name: Repository nameprivate: Boolean for visibilityref: Full reference path (e.g., 'refs/heads/new-branch')sha: Commit SHA to point the new reference todefault_branch: Default branch namePitfalls:
GITHUB_CREATE_A_REFERENCE only creates NEW references; use GITHUB_UPDATE_A_REFERENCE for existing onesref must start with 'refs/' and contain at least two slashesGITHUB_LIST_BRANCHES paginates via page/per_page; iterate until empty pageGITHUB_DELETE_A_REPOSITORY is permanent and irreversible; requires admin privilegesWhen to use: User wants to find code, files, or commits across repositories
Tool sequence:
GITHUB_SEARCH_CODE - Search file contents and paths [Required]GITHUB_SEARCH_CODE_ALL_PAGES - Multi-page code search [Alternative]GITHUB_SEARCH_COMMITS_BY_AUTHOR - Search commits by author/date/org [Required]~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.