gh-fine-grained-pat
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill automates the creation of GitHub PATs via browser automation using Playwright. All browser activity is confined to official GitHub settings and authentication pages.
- [SAFE]: Credential management is robust, utilizing a 'gated vault' model that integrates with system-level security (e.g., Touch ID) for sensitive operations. Subprocess interactions with tools like
vaultandoathtoolare used exclusively for secure identity and secret management. - [SAFE]: Data protection measures are in place to ensure that Personal Access Tokens are never printed to the console or chat. Generated tokens are either written to files with restricted permissions (0600) or stored directly in a secure vault.
- [SAFE]: Browser session security is maintained through the use of isolated, account-specific persistent profiles located outside of the repository directory.
- [SAFE]: The skill uses a declarative JSON specification and includes structural validation to ensure that token creation follows user-defined constraints accurately.
Audit Metadata