The Agent Skills Directory

[SAFE]: The skill is entirely instructional, providing a guide on GitHub authentication types (PATs, Apps, OIDC, etc.) and their respective security models. It does not contain any executable scripts, automated commands, or network operations.
[SAFE]: The content explicitly promotes security best practices, including using fine-grained tokens, minimizing repository permissions in GitHub Actions via the permissions: block, and using OIDC to avoid storing long-lived cloud secrets.
[SAFE]: No hardcoded credentials, obfuscation, persistence mechanisms, or data exfiltration patterns were detected. The skill advises users on how to handle security incidents (e.g., rotating compromised secrets).

github-auth