brikko-studio-ghsa-maintainer

Manage GitHub Security Advisory workflows with PATCH sequencing and state verification.

1|Updated May 3, 2026
One-click install
npx skills add https://github.com/brikkoAI/brikko-studio --skill brikko-studio-ghsa-maintainer
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: brikko-studio-ghsa-maintainer
Source: https://github.com/brikkoAI/brikko-studio/tree/main/packages/core/.agents/skills/openclaw-ghsa-maintainer
Command: npx skills add https://github.com/brikkoAI/brikko-studio --skill brikko-studio-ghsa-maintainer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Managing GitHub Security Advisories (GHSAs) for the Brikko Studio repository involves repetitive, error-prone manual steps including payload formatting, validation of private fork state, and correct API sequencing, which can lead to failed publishes or incomplete advisories if done incorrectly.

Core Features & Use Cases

  • Advisory State Inspection: Fetch current GHSA status, linked private fork details, and vulnerability payload to confirm pre-patch conditions.
  • Safe Advisory Publishing: Automate PATCH sequencing for GHSA fields, validate private fork PR closure, and verify post-publish state to avoid 422 API errors.
  • Use Case: A Brikko Studio security maintainer can use this skill to publish a finalized security advisory for a patched dependency vulnerability without manually handling JSON payload formatting or forgetting critical validation checks.

Quick Start

Use the brikko-studio-ghsa-maintainer skill to publish the finalized GHSA for the recently patched npm package vulnerability in the Brikko Studio repository.

Frequently Asked Questions about brikko-studio-ghsa-maintainer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I publish a GitHub Security Advisory without getting a 422 API error?

To publish a GitHub Security Advisory without a 422 API error, you must enforce correct API PATCH sequencing, validate Markdown description formatting, and verify the post-publish state. This ensures compliant GHSA publishing and prevents failed API requests.

What is the correct workflow for patching a vulnerability in a private fork before publishing a GHSA?

The correct workflow for patching a vulnerability in a private fork involves inspecting the current GHSA status, verifying private fork pull request closure, and validating the vulnerability payload. These pre-patch conditions ensure the repository is ready for safe advisory publishing.

How do I format a GHSA payload correctly for GitHub security advisories?

Formatting a GHSA payload correctly requires structuring the JSON fields accurately and applying proper Markdown description formatting. Automating this payload validation prevents manual formatting errors and ensures the security advisory data meets GitHub's API requirements.

Why does my GitHub Security Advisory publish fail after closing a private fork pull request?

Your GitHub Security Advisory publish may fail after closing a private fork pull request due to incorrect API PATCH sequencing or incomplete post-publish state verification. Validating the payload format and verifying the final state prevents these incomplete advisory publishing errors.

Can I automate GitHub Security Advisory state inspection for open source repositories?

Yes, you can automate GitHub Security Advisory state inspection to fetch current GHSA status, linked private fork details, and vulnerability payloads. This confirms pre-patch conditions and ensures compliant advisory workflows for open source repository maintenance.

What are the limitations of manually managing GitHub Security Advisory workflows?

Manually managing GitHub Security Advisory workflows introduces repetitive, error-prone steps like payload formatting and API sequencing. These manual actions frequently lead to failed publishes, incomplete advisories, and incorrect private fork state validation.