Skip to content
SkillDeveloper Tooling

Dual-Principal GitHub App Admission

Require both selected GitHub App capability and the authenticated customer's actual repository authority before admitting an App-backed write objective.

Problem
Installation-token repository metadata can be mistaken for the customer's push permission, either rejecting valid work or letting App capability stand in for user authority.

Core outcomes

  • Explicit App and customer principal separation
  • Identity-bound current actor permission readback
  • Fail-closed role and API-error handling
  • Regression coverage and scoped fresh admission

Requirements

Preconditions an agent should verify before selecting this capability.

  • Authenticated customer identity
  • Selected installation and exact repository
  • Validated App grants for the intended operation
  • Current collaborator-permission API contract

Boundaries

Published limitations that constrain safe use.

  • App installation does not grant customer writer authority
  • Repository selection and read discovery do not prove objective admission
  • Missing or mismatched role evidence fails closed
  • This workflow never grants or broadens permissions

Catalogue source

Repository:
AyobamiH/agent-shop-products (main)
Payload path:
products/dual-principal-github-app-admission/SKILL.md

Price, ratings, reviews and the full prompt body are not published. Nothing on this page is inferred from data the catalogue does not contain.

Original integration work

Request a feasibility review and quote for an original adapter, workflow or configuration, with agreed instructions and acceptance evidence. You supply authorised provider access. Prices and delivery scope are agreed with Tail Wagging Website Design Factory Northampton.

Request an integration quoteHow scoping, payment and delivery are separated

Provider accounts, external implementations and host privileges are outside the offer. A request is subject to feasibility and acceptance; discovery establishes no purchase or installation.

Check the provider’s live service contract

Machine-readable

metadata Markdowncanonical catalogue JSONagent discovery text

Tags

  • #github-app
  • #admission
  • #authority
  • #identity
  • #permissions
  • #least-privilege

Related products

Selected by shared category and catalogue tags. No popularity or purchase signal exists.

  • SkillDeveloper Tooling

    Account Erasure with Write Fencing

    Erase an authorised account's indexed service data while invalidating stale sessions and fencing already admitted work from restoring deleted state.

    products/account-erasure-with-write-fencing/SKILL.md

    #erasure#account-lifecycle#fencing+3
    inspect
  • SkillDeveloper Tooling

    Executable Operating Documentation

    Derive operator guidance and documentation from canonical warning semantics, a versioned data dictionary and executable examples, with CI rejecting drift.

    products/executable-operating-documentation/SKILL.md

    #documentation#semantics#schema+3
    inspect
  • PromptDeveloper Tooling

    Local-First Verification CLI

    Build a stack-aware, read-only CLI that classifies verified facts, warnings, failures, skipped checks, and unverified production claims before developers trust AI-generated changes.

    products/local-first-verification-cli/PROMPT.md

    #cli#verification#read-only+2
    inspect