fix-github-vulnerabilities

What problem does it solve?

This Skill automates the end-to-end process of identifying and patching open Dependabot alerts in a GitHub repository, reducing manual remediation time by detecting vulnerable dependencies, updating them to patched versions using the repo's native package manager, and generating a commit with fixes.

Core Features & Use Cases

• Fetch open Dependabot alerts across ecosystems and group them by project and language
• Update vulnerable dependencies to at least the patched versions, aligned with repository tooling
• Run available tests to verify updates and push fixes or propose a pull request when needed
• Support security remediation workflows for typical open-source and private repositories

Quick Start

Run the fix-github-vulnerabilities skill on your repository to automatically fetch open Dependabot alerts, update vulnerable dependencies, and push fixes.