It seems that IN_CREATE reacts when the file descriptor is created and not necessarily when the file has been fully filled. IN_CLOSE_WRITE is more reliable.
Automatic "allowed_from" protection using GitHub Meta API
Checking in requests folder
Updated instructions