github-app-dev

Guide GitHub App development with authentication, webhooks, and deployment patterns.

7|3|Updated Nov 15, 2025
One-click install
npx skills add https://github.com/aRustyDev/ai --skill github-app-dev
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: github-app-dev
Source: https://github.com/aRustyDev/ai/tree/main/components/skills/github-app-dev
Command: npx skills add https://github.com/aRustyDev/ai --skill github-app-dev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill guides developers through building robust GitHub Apps, covering authentication, webhook handling, and deployment patterns to automate integrations and extend GitHub capabilities.

Core Features & Use Cases

  • App registration & authentication: Understand app vs. installation authentication flows (JWTs, installation tokens, OAuth) and secure hosting options.
  • Webhook & API integrations: Implement event handlers, use Octokit, and process complex GitHub events safely.
  • Deployment patterns: Learn deployment options (Cloudflare Workers, serverless, self-hosted) and best practices for edge vs. centralized hosting.
  • Probot integration: Use Probot for rapid prototyping and simpler bots, with guidance on when to use Probot vs raw Octokit.

Quick Start

Scaffold a new GitHub App project, install dependencies, and bootstrap a minimal app structure to start handling webhooks and API calls.

Frequently Asked Questions about github-app-dev

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build and deploy a GitHub App with webhooks?

GitHub Apps automate integrations by registering with GitHub, handling webhooks for events, and using authentication tokens to interact with repositories. This Skill provides complete setup guides, starter configurations, and webhook handling patterns for multiple deployment options including Cloudflare Workers and serverless platforms.

What's the difference between app authentication and installation authentication in GitHub Apps?

App authentication uses JWT tokens to identify the app itself, while installation authentication uses installation tokens to act on behalf of a specific repository or organization. This Skill covers both flows, helping you choose the right pattern for your security and permission requirements.

Can I use Probot instead of raw Octokit for building a GitHub App?

Probot simplifies GitHub App development by wrapping Octokit and handling boilerplate setup, making it ideal for rapid prototyping. This Skill guides when to use Probot versus direct Octokit usage based on your app's complexity and hosting needs.

How do I set up minimal permissions for a GitHub App?

GitHub Apps use permission scopes and webhook subscriptions to limit access. This Skill provides security best practices and permission patterns that grant only the access your app actually needs, reducing risk and improving review acceptance.

What deployment options exist for GitHub Apps?

GitHub Apps can run on Cloudflare Workers for edge hosting, serverless platforms for scalability, or self-hosted servers for full control. This Skill covers deployment patterns, tradeoffs between edge and centralized hosting, and configuration for each option.

Do I need to handle GitHub webhook retries and validation?

Yes. GitHub resends failed webhooks and signs payloads with secrets for security verification. This Skill covers safe webhook processing, signature validation, and idempotency patterns to prevent duplicate event handling.