skills.rest
zero-yx
zero-yxCOMMUNITY
Explore all skills by this author →
GitHub

github-password-rotator

Automates GitHub password rotation and security-settings login through isolated Chrome browser automation.

2|Updated Jun 18, 2026
Search Tags:#github#browser automation#chrome devtools#2fa#credential management#account security#password rotation
One-click install
npx skills add https://github.com/zero-yx/static_flow --skill github-password-rotator-zero-yx
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: github-password-rotator
Source: https://github.com/zero-yx/static_flow/tree/main/skills/github-password-rotator
Command: npx skills add https://github.com/zero-yx/static_flow --skill github-password-rotator-zero-yx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve? Rotating a GitHub password or reaching the security settings page requires navigating login forms, sudo confirmations, 2FA prompts, CAPTCHAs, and device verification, which is tedious and error-prone to automate safely without leaking credentials. ## Core Features & Use Cases - Automated Password Rotation: Drives an isolated Chrome profile via the DevTools protocol to log in, handle sudo confirmation, fill the password-change form, and detect success even without a flash message. - Login-Only Mode: Uses --login-only to stop at the GitHub security settings page so the user can manually change 2FA, passkeys, or recovery methods. - Optional 2FA and Learning Repo: Can fetch TOTP codes from 2fa.fun with a hidden secret and create a beginner hello-world-from-<account> repository after rotation. - Use Case: An operator needs to rotate passwords across multiple GitHub accounts through a local proxy; the script prefills credentials from environment variables while the user handles CAPTCHA or device checks manually. ## Quick Start Ask the agent to rotate the GitHub password for a given username using the github-password-rotator skill, providing current and new passwords through hidden prompts.

Frequently Asked Questions about github-password-rotator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I rotate a GitHub password with browser automation?▼

Run the rotate_github_password.py script with --github-login, supplying the current and new passwords via environment variables or hidden prompts. It launches an isolated Chrome profile, logs in, handles sudo confirmation, fills the password-change form, and reports completion.

How do I log in to GitHub security settings without changing the password?▼

Use the --login-only flag, which logs in and stops at https://github.com/settings/security while keeping the browser open. This mode is intended for manually changing 2FA, passkeys, or recovery methods.

Can the script handle GitHub two-factor authentication prompts?▼

Yes, with --auto-2fa-fun it submits a TOTP secret to 2fa.fun and reads the generated code from input.faotp.value without printing it. Passkeys, CAPTCHAs, and device verification remain manual user steps.

Does the GitHub password rotator work without Chrome installed?▼

No, it requires a Chrome or Chromium binary plus Node.js for the DevTools driver script. You can point to a custom browser binary with --chrome-bin and override the proxy with --proxy.

What happens if GitHub shows no success message after a password change?▼

The helper treats a collapsed password form with a visible Change password button on the security settings page as a completed no-flash state. It then navigates back to the settings URL so a browser refresh cannot resubmit the form.

Related Skills

Explore More Software Engineering Skills→
framersaiframersai

1password

Retrieve credentials and fields from 1Password vaults using the op CLI.

Official
Intermediate
AcczdyAcczdy
2

performing-service-account-audit

Inventory service accounts across AD, cloud IAM, databases, and applications and classify risk from ownership, privileges, password posture, and activity.

Community
Advanced
aashariaashari
5

mail-security

Identify security-related emails from Apple Mail using Python and sqlite3.

Community
Intermediate
InverterNetworkInverterNetwork

github-repo-management

Manage GitHub repository lifecycles via CLI or REST API.

Official
Intermediate