Implement GitHub OAuth with Nango
Combining GitHub login and repository permissions creates identity-linking and webhook complexity. This skill provides a two-connection Nango pattern with routes, storage, reconciliation, and sync guidance.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "github-oauth-nango-integration" from https://skillstore.io/skills/agentworkforce-github-oauth-nango-integration.md and its manifest at https://skillstore.io/api/skills/agentworkforce-github-oauth-nango-integration/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "github-oauth-nango-integration". Explain which Nango connection belongs on each database record.
Expected outcome:
Using "github-oauth-nango-integration". What should happen when a GitHub organization requires administrator approval?
Expected outcome:
Treat the authorization as pending, record the approval state, avoid reporting completion, and let the frontend continue polling until repositories become available.
Using "github-oauth-nango-integration". Review my webhook handling priorities.
Expected outcome:
The static command, network, environment, sensitive-data, reconnaissance, and prompt-injection alerts are false positives caused by Markdown examples and legitimate OAuth guidance. Two semantic weaknesses remain: JWT storage in localStorage and an OAuth completion endpoint that issues tokens using only a connection identifier.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/agentworkforce-github-oauth-nango-integration/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/agentworkforce-github-oauth-nango-integration?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/agentworkforce-github-oauth-nango-integration?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentworkforce-github-oauth-nango-integration/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/agentworkforce-github-oauth-nango-integration.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>AgentWorkforce. (2026). github-oauth-nango-integration security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/agentworkforce-github-oauth-nango-integration/audits/10@techreport{agentworkforce-agentworkforce-github-oauth-nango-integration-2026,
author = {AgentWorkforce},
title = {github-oauth-nango-integration security audit report (audit version 10)},
institution = {Skillstore},
year = {2026},
number = {10},
url = {https://skillstore.io/skills/agentworkforce-github-oauth-nango-integration/audits/10},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "github-oauth-nango-integration security audit report (audit version 10)"
version: "unspecified"
type: report
authors:
- name: "AgentWorkforce"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/agentworkforce-github-oauth-nango-integration/audits/10"
identifiers:
- type: other
value: "skillstore:agentworkforce-github-oauth-nango-integration:audit:10"
description: "Skillstore immutable audit report identifier"
Plan a Nango-backed GitHub login flow while preserving a separate connection for later repository authorization.
Design GitHub App installation, repository ownership, approval waiting, and synchronization for an existing authenticated product.
Compare an existing implementation against the two-connection model, webhook checks, and identity reconciliation sequence.
Explain how two Nango connections separate GitHub login from repository access for my [application type]. List the records and identifiers I must store.
Plan GitHub login through Nango using [framework] and [database]. Cover session creation, auth webhooks, user reconciliation, polling, and token delivery.
Design the authenticated GitHub App connection flow for [product]. Include installation ownership, repository upserts, organization approval, sync triggers, and frontend status handling.
Review this GitHub OAuth and Nango architecture: [details]. Identify identity-linking, authorization, webhook, token-storage, connection-lifecycle, and organization-approval risks with prioritized fixes.
Author
AgentWorkforceLicense
MIT
Skillstore revision
r2
Version notice
The author did not declare a version.
Repository
https://github.com/AgentWorkforce/relay/tree/main/.claude/skills/github-oauth-nango-integrationRef
31bc7611b504c197d3e993aef7943461c871616f
Maintenance freshness
7/26/2026
Usage
6 downloads · 380 views
File structure
📄 SKILL.md
Build Reliable React Command Palettes
Command palettes often develop keyboard, scrolling, filtering, and render-loop defects. This skill provides focused React patterns for reliable interactions and stable command registration.
Build Distinctive Production-Grade Frontends
Generic interfaces often lack a clear visual identity and polished interaction details. This skill guides purposeful design choices and functional frontend implementation.
Create Correct Claude Rules
Incorrect rule frontmatter can prevent project instructions from loading as intended. This skill guides valid paths syntax, glob patterns, global rules, and Cursor migrations.
Create Effective AI Skills
AI skills can become difficult to discover, scan, and apply consistently. This guide provides structures, examples, optimization methods, and review checklists for effective skill authoring.
Build Reliable PRPM Package Manifests
PRPM manifests are easy to misconfigure across packages, collections, and target formats. This skill guides consistent structure, metadata, paths, tags, scripts, and validation.
Build Focused Claude Code Agents
Claude Code agent files require precise frontmatter, tool permissions, personas, and structure. This skill provides templates, validation rules, examples, and troubleshooting guidance for reliable agent creation.
Design Production-Ready APIs
by AutumnsGrove
Inconsistent API contracts create integration errors and costly migrations. This skill guides REST, GraphQL, OpenAPI, authentication, versioning, validation, and documentation decisions.
Set Up Convex Authentication
by get-convex
Convex auth setup can fail when provider wiring, environment variables, and backend checks do not match. This skill guides the correct provider flow and adds verified Convex authentication patterns.
Build CloudBase HTTP API Clients
by tencentcloudbase
CloudBase teams need reliable raw HTTP integrations when SDKs are unavailable. This skill guides endpoint selection, authentication, OpenAPI lookup, and safe request construction.
Configure Azure Identity for Rust
by sickn33
Azure authentication choices can be difficult to match to each runtime. This skill provides focused Rust examples for local tools, managed identities, and service principals.
Build Secure Payment Integrations
by sickn33
Payment features fail when checkout, subscriptions, and webhooks are built without clear security controls. This skill guides secure processor integrations with practical validation, retry, and compliance checks.
Build Consistent FastAPI Routers
by sickn33
FastAPI endpoints become inconsistent when authentication, models, and status codes vary. This skill provides concise router patterns and integration steps for reliable API development.