Audit pending vulnerability disclosure drafts and escalate aged items.
npx skills add https://github.com/aaronjmars/aeon --skill disclosure-tracker
Please help me install this Agent Skill. Skill: disclosure-tracker Source: https://github.com/aaronjmars/aeon/tree/main/skills/disclosure-tracker Command: npx skills add https://github.com/aaronjmars/aeon --skill disclosure-tracker
This Skill prevents CRITICAL and HIGH vulnerability disclosure drafts from silently aging past responsible-disclosure timelines by auditing the pending vulnerability disclosure queue every day.
Use the disclosure-tracker skill to produce a daily notification summarizing pending vulnerability disclosure drafts and escalating only those that have exceeded severity thresholds.
High-intent search queries and answers about installing and using this skill.
Track pending vulnerability disclosure drafts by running daily audits that parse local advisory files in memory/pending-disclosures/ to summarize queue state and flag aged items. This prevents critical drafts from silently exceeding responsible disclosure timelines.
Monitoring security advisory age involves computing draft age against severity thresholds and cross-referencing GitHub PR status in memory/topics/pr-status.md. This determines if items remain truly pending or already have merged fixes in the repository.
Automate escalation alerts by applying deterministic notification logic via ./notify based on computed counts and age. Urgent escalation messages trigger only when drafts exceed severity thresholds, otherwise daily digests report cleanup candidates.
Audit pending security disclosures automatically by scanning the memory/pending-disclosures/ backlog daily. The process classifies status hints, identifies aged drafts, and appends structured entries to memory/logs/ for traceability across runs.
Responsible disclosure tracking optionally cross-references existing PR outcomes in memory/topics/pr-status.md. This integration validates whether pending drafts already have corresponding fixes in the repository before triggering escalation notifications.
Vulnerability disclosure drafts may not escalate if status hints indicate resolution or PR status cross-reference shows existing fixes. Escalation requires drafts to genuinely age past severity thresholds while remaining truly pending in the backlog.
Atrium-HermesScan draft vulnerability advisories and classify them by age and severity.
Atrium-HermesIdentify GitHub releases from watched repositories and classify them by severity for alerts.
aaronjmarsAudits vuln-scanner security PR and disclosure lifecycle status against live GitHub data.
huqianghuiManage PPTX slides locally with Python and the python-pptx package.
