skills.rest
cameronsjo
cameronsjoCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

install-github-app-safely

Install the Claude Code GitHub App with hardened fork workflows and minimal permissions.

Updated Aug 27, 2026
Search Tags:#automation#security#safety#installation#workflows#github-app#fork-pr
One-click install
npx skills add https://github.com/cameronsjo/dev-toolkit --skill install-github-app-safely
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: install-github-app-safely
Source: https://github.com/cameronsjo/dev-toolkit/tree/main/skills/install-github-app-safely
Command: npx skills add https://github.com/cameronsjo/dev-toolkit --skill install-github-app-safely

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Install Claude Code GitHub App on the repository and harden workflows to prevent abuse, misconfigurations, and API spend leaks.

Core Features & Use Cases

  • Standard GitHub App installation with required secrets setup.
  • Harden fork PR workflows to require approvals from outside contributors.
  • Audit and verify workflow files for unsafe triggers and risky permissions.
  • Apply a concise post-install safety checklist to ensure ongoing governance.

Quick Start

Run the built-in /install-github-app command and follow the interactive prompts to complete the safe installation.

Frequently Asked Questions about install-github-app-safely

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I safely install a GitHub App and prevent API abuse?▼

Safely installing a GitHub App requires verifying prerequisites, enforcing minimal permissions, hardening fork PR workflows to require approvals, and auditing workflow files for unsafe triggers to prevent API abuse and spend leaks.

How do I harden GitHub workflows for fork PRs to prevent unauthorized execution?▼

Hardening workflows for fork PRs involves requiring approvals from outside contributors before execution. This prevents unauthorized users from triggering automated workflows and leaking API spend through malicious pull requests.

Why does my GitHub workflow file trigger unsafe actions on outside contributions?▼

Your GitHub workflow file triggers unsafe actions because it lacks proper hardening for fork PRs. Auditing the workflow file for unsafe triggers and enforcing minimal permissions will restrict execution and secure the repository.

Do I need to set spend limits when installing the Claude Code GitHub App?▼

Yes, setting spend limits is necessary when installing the Claude Code GitHub App. The safe installation process prompts for spend-limit awareness and provides a post-install safety checklist to ensure ongoing API spend governance.

What is the best way to audit GitHub workflow files for risky permissions after an app installation?▼

The best way to audit GitHub workflow files for risky permissions is to check for unsafe triggers and enforce minimal permissions. This post-install safety checklist ensures ongoing governance and prevents API abuse.

Related Skills

Explore More Software Engineering Skills→
X-School-AcademyX-School-Academy
9

dev-swarm-nodejs

Install and configure Node.js development environment with nvm and pnpm.

Official
Advanced
KingSharkGKingSharkG

orchestrator-state

Persist and coordinate AI workflow state across subtasks with hot and history files.

Community
Advanced
swarm-ai-researchswarm-ai-research

fork-contributor-leaderboard

Aggregate forks, upstream PRs, reviews, and fork activity into a ranked weekly leaderboard.

Official
Advanced
NetcrackerNetcracker
5

zizmor

Audit GitHub Actions workflows and action.yml files for security issues and apply automated fixes.

Official
Advanced