📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills github-automation
📦
github-automation
Content revision r2 High Risk ⚙️ External commands🌐 Network access
Automate GitHub Workflows with Rube MCP
GitHub maintenance requires many separate searches, checks, and updates. This skill coordinates repository workflows through Rube MCP with practical safeguards and validation guidance.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "github-automation" from https://skillstore.io/skills/sickn33-github-automation.md and its manifest at https://skillstore.io/api/skills/sickn33-github-automation/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "github-automation". List open issues in acme/widgets and exclude pull requests.
Expected outcome:
Found 12 open issues. Three are unlabeled, two have no assignee, and the oldest has been open for 46 days.
Using "github-automation". Review pull request 42 in acme/widgets.
Expected outcome:
Pull request 42 is mergeable. One CI check is failing, so merging is not recommended.
Using "github-automation". Audit protection for the main branch in acme/widgets.
Expected outcome:
The main branch requires two approvals and passing checks. Administrator enforcement is disabled. No changes were applied.
Security Audit
High Riskv5 • 7/23/2026 Open versioned report
All 116 external-command alerts are false positives caused by Markdown inline code, not shell execution. The Rube endpoint is a real third-party network dependency that delegates GitHub access through OAuth. Workflow dispatch and access-control changes lack explicit confirmation requirements, although merge and deletion are guarded.
1
Files scanned
236
Lines analyzed
1
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Privileged changes lack complete approval gates
The skill can trigger workflows, change branch protection, and add collaborators. Its explicit confirmation rule covers merge and deletion, but not these security-sensitive writes.
The documented tool sequence names each privileged action, while the safety section limits mandatory confirmation to merge and deletion.
Medium
GitHub access is delegated through third-party OAuth
Users must connect GitHub through Rube and follow a returned OAuth link. The document does not state requested scopes, data handling, or token revocation guidance.
The setup explicitly requires a Rube MCP endpoint and GitHub OAuth, but provides no scope or data-handling details.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Low
Hardcoded URL
**Get Rube MCP**: Add `https://rube.app/mcp` as an MCP server in your client configuration. No API k
Line 21 directs users to configure https://rube.app/mcp, creating a real third-party network and OAuth trust boundary. Repository data and authorized actions may transit that service.
Risk Factors
⚙️ External commands (50)
SKILL.md:16 SKILL.md:17 SKILL.md:21 SKILL.md:23 SKILL.md:24 SKILL.md:35 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:39 SKILL.md:42 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:46 SKILL.md:47 SKILL.md:48 SKILL.md:51 SKILL.md:53 SKILL.md:60 SKILL.md:61 SKILL.md:62 SKILL.md:63 SKILL.md:64 SKILL.md:65 SKILL.md:66 SKILL.md:69 SKILL.md:70 SKILL.md:71 SKILL.md:72 SKILL.md:73 SKILL.md:76 SKILL.md:77 SKILL.md:78 SKILL.md:86 SKILL.md:87 SKILL.md:88 SKILL.md:89 SKILL.md:90 SKILL.md:91 SKILL.md:92 SKILL.md:95 SKILL.md:96 SKILL.md:97 SKILL.md:98 SKILL.md:99 SKILL.md:102 SKILL.md:103 SKILL.md:104 SKILL.md:105
🌐 Network access (1)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-github-automation/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-github-automation?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-github-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-github-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-github-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). github-automation security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-github-automation/audits/5BibTeX citation
@techreport{sickn33-sickn33-github-automation-2026,
author = {sickn33},
title = {github-automation security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-github-automation/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "github-automation security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/sickn33-github-automation/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-github-automation:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Maintain pull request queues
Inspect changed files, mergeability, and CI status before preparing a merge decision.
Organize issue backlogs
Find, create, label, assign, and comment on repository issues with clear repository context.
Review repository operations
Inspect workflows, deployments, collaborators, permissions, and branch protection before proposing controlled changes.
Try These Prompts
List open work
List open issues in [owner/repo], separate pull requests, and summarize title, labels, assignee, and age. Do not modify anything.
Prepare an issue
Prepare an issue in [owner/repo] titled [title] with [body]. Show the proposal and ask before creating it.
Assess a pull request
Review pull request [number] in [owner/repo], inspect changed files and CI status, then recommend whether it is ready to merge.
Audit access controls
Audit [owner/repo] branch protection and collaborator permissions, propose changes, and require approval before every access or protection update.
Best Practices
- Call RUBE_SEARCH_TOOLS before workflows so each action uses the current tool schema.
- Verify the repository, branch, identifiers, permissions, pagination, and current state before acting.
- Require explicit approval before merges, workflow dispatches, repository updates, collaborator changes, or branch protection changes.
Avoid
- Do not merge, delete, or alter access controls from an ambiguous request.
- Do not treat one result page as a complete repository inventory.
- Do not share OAuth links, repository content, or credentials with unrelated services.
Frequently Asked Questions
What connection does this skill require?
It requires the Rube MCP endpoint and an active GitHub OAuth connection for the GitHub toolkit.
Can it modify repositories?
Yes. It documents issue, pull request, branch, repository setting, workflow, collaborator, and branch protection actions.
Does it bypass GitHub permissions?
No. Every action remains subject to the permissions granted to the connected GitHub account.
Can it access private repositories?
Only repositories exposed by the connected account and approved OAuth scopes are available.
How does it handle large result sets?
It uses page-based pagination and must continue until a page contains fewer items than the requested page size.
Does it merge pull requests automatically?
No. The skill requires mergeability and CI checks, followed by explicit user confirmation before merging.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r2
Version notice
The author did not declare a version.
Ref
88a8e9a07f4c54ab105c1c41b6267c287146b07b
Maintenance freshness
7/26/2026
Usage
8 downloads · 116 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-fullstack
82Build Fullstack Apps with Senior Patterns
Teams need consistent setup, architecture, and review guidance for modern web applications. This skill provides scaffolders, workflow references, and quality prompts for React, Next.js, Node.js, GraphQL, and PostgreSQL projects.
Coding & Development View
📦
senior-architect
81Design Scalable Software Architectures
Architecture decisions are hard to compare across web, mobile, backend, and cloud systems. This skill provides structured guides and local scaffold scripts for reports, dependency review, and trade-off documentation.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
building-plugins
83Build Claude Code Plugins
by C0ntr0lledCha0s
Creating Claude Code plugins requires correct structure, validation, documentation, and safe packaging. This skill guides users through plugin architecture, templates, validation, and publishing workflows.
DevOps & Infrastructure View
📦
building-hooks
83Build Claude Code Automation Hooks
by C0ntr0lledCha0s
Claude Code hooks can automate checks, formatting, and policy enforcement, but unsafe hook scripts can affect local files or commands. This skill guides users through structured hook design, validation, and maintenance.
DevOps & Infrastructure View
📦
writing-hookify-rules
82Write Hookify Rules for Claude Code
by anthropics
Hook rules can be hard to write correctly across bash, file, stop, and prompt events. This skill gives Claude, Codex, and Claude Code practical guidance for creating and testing Hookify rules.
DevOps & Infrastructure View
📦
senior-devops
81Automate DevOps Pipelines and Deployments
by alirezarezvani
DevOps work often requires repeatable pipeline, infrastructure, and deployment patterns. This skill provides scripts and reference guides for CI/CD, IaC, deployment, and operations review.
DevOps & Infrastructure View
📦
homeassistant-config
81Build Home Assistant YAML Faster
by ESJavadex
Home Assistant YAML is easy to break when automations, secrets, and dashboards grow. This skill provides patterns, examples, and local validators for safer configuration work.
DevOps & Infrastructure View
📦
wp-wpcli-and-ops
81Manage WordPress Safely with WP-CLI
by Automattic
WordPress command-line operations can damage data or affect the wrong site. This skill provides guarded workflows for inspection, changes, automation, and verification.
DevOps & Infrastructure View