Match GitHub repositories to CVE Numbering Authorities and output report.json.
npx skills add https://github.com/lukehinds/scrutineer-attest-test --skill cna-match
Please help me install this Agent Skill. Skill: cna-match Source: https://github.com/lukehinds/scrutineer-attest-test/tree/main/skills/cna-match Command: npx skills add https://github.com/lukehinds/scrutineer-attest-test --skill cna-match
Determine which CVE Numbering Authority (CNA) covers this repository, so disclosures can be routed to the CNA's security contact rather than only the maintainer. It reads scrutineer's cached CNA list and matches the repository owner, project name, and published packages against each CNA's published scope.
Run the cna-match skill on a repository to generate a CNA coverage report.
High-intent search queries and answers about installing and using this skill.
To find the correct CVE Numbering Authority for a GitHub repository, match the repository owner, project name, and published package scopes against CNA entries to route security disclosures to the proper contact.
When no CVE Numbering Authority covers a repository, the disclosure is routed to the maintainer as a fallback, and the reasoning is documented for potential follow-up with external CNAs.
Yes, you can match published package scopes to CNA entries by comparing repository metadata against each CNA's defined scope to identify the governing authority for compliance and disclosure.
You generate a CNA coverage report by running an analysis that reads the cached CNA list, compares repository metadata, and outputs a report.json file containing the matched CNA and a concise rationale.
The best way to route security disclosures for GitHub-hosted projects is to identify the governing CNA based on repository owner and package scopes, directing vulnerability reports to the assigned security contact.
opsmillExtract the GitHub remote URL, owner, and repository from local git config.
sonnyginExtract publication details from professor homepages and draft bilingual cold emails.
dnzengouScan GitHub repositories for security vulnerabilities and generate responsible disclosure reports.
OwnLabAIFetch cancer genomics data from the cBioPortal REST API for studies and genes.
