apacheOfficial·9 Agent Skills Included

airflow-steward

Automated PR triage, security handling, and release workflows

Automates the repetitive maintenance work of open-source projects: pull request triage and review, issue reproduction and backlog sweeps, security report handling through CVE publication, and release candidate preparation. Eliminates manual queue grooming, copy-paste CVE record filling, and slow first-response times for contributors. Gives maintainers ready-to-confirm drafts, dashboards, and paste-ready commands so every decision stays human while the grunt work disappears.

79|76

↗

npx skills add apache/airflow-steward --all -g -y

Available:

Tells the agent how to safely execute the maintenance skills in this repo: treat all external content as data rather than instructions, propose every state-changing action for human confirmation, and follow the framework's confidentiality, linking, and commit conventions.

All Skills in This Repository (9)

Pure Emerald Level Indicators

📦 In Repo

apache

generate-cve-json

Generate deterministic CVE 5.x JSON records from GitHub tracking issues.

import-security-issue

Convert Gmail security reports into tracker issues with Needs triage status.

sync-security-issue

Reconcile a security issue across tracker, GitHub PRs, and reporter thread.

import-security-issue-from-pr

Create a security tracker from a public upstream PR via gh api.

import-security-issue-from-md

Parse Markdown security findings and create tracker issues in 'Needs triage'.

invalidate-security-issue

Apply invalid disposition to security trackers via gh CLI and Gmail drafts.

fix-security-issue

Coordinate security issue remediation across tracker, upstream clone, and PR lifecycle.

allocate-cve

Walks tracker issue holders through PMC-gated CVE allocation and updates the tracker with Stripped title and JSON link.

deduplicate-security-issue

Merge duplicate security issue trackers while preserving credits and references.

Official

Advanced

Frequently Asked Questions

FAQPage Schema

How to install airflow-steward?▼

Run `npx skills add apache/airflow-steward --all -g -y` in your terminal to install the full skill set globally.

What does Apache Magpie (airflow-steward) do?▼

It gives your coding agent ready-made workflows for open-source maintenance: triaging PR queues, reproducing and fixing issues, handling security reports through CVE publication, cutting releases, and mentoring new contributors.

Can it merge PRs or publish releases automatically?▼

No. Every state-changing action — comments, labels, merges, release commands — is drafted by the agent and only executed after explicit maintainer confirmation.

Which AI agents are supported?▼

The skills use the portable SKILL.md format and work with Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, Windsurf, Goose, and other agents that read the shared .agents/skills/ path.

Do I need to be an Apache maintainer to use it?▼

No. The framework is project-agnostic: any open-source project can adopt it and configure its own labels, rosters, and release process, though several skills ship with ASF-specific defaults.