fix-security

Fetch and remediate GitHub security alerts via the GitHub API and gh CLI.

26|2|Updated Mar 24, 2026
One-click install
npx skills add https://github.com/Llloooggg/LetsFLUTssh --skill fix-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: fix-security
Source: https://github.com/Llloooggg/LetsFLUTssh/tree/main/.claude/skills/fix-security
Command: npx skills add https://github.com/Llloooggg/LetsFLUTssh --skill fix-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

GitHub security issues like Dependabot alerts, code scanning, and secret scanning can pile up, and triaging and fixing them manually is time-consuming and error-prone.

Core Features & Use Cases

  • Automated alert aggregation: fetch and summarize open security alerts across Dependabot, code scanning, and secret scanning.
  • Prioritized remediation guidance: provide triage priorities and actionable steps to fix issues in code, dependencies, and secrets.
  • Use Case: A development team wants to quickly surface critical vulnerabilities and implement fixes before release.

Quick Start

Run a holistic security fetch to identify open alerts and propose fixes for the repository.

Frequently Asked Questions about fix-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate GitHub security alerts triage and remediation?

Fetch GitHub security alerts across Dependabot, code scanning, and secret scanning using the GitHub API and gh CLI, then generate a prioritized summary of findings with actionable remediation steps for each vulnerability.

What's the best way to prioritize Dependabot and code scanning alerts before a release?

Prioritize Dependabot and code scanning alerts by running a holistic security fetch that aggregates open findings and provides triage priorities with actionable steps to fix issues in code, dependencies, and secrets before release.

Does this GitHub security alert fixer require the gh CLI to fetch alerts?

Fetching GitHub security alerts leverages both the GitHub API and the gh CLI to retrieve Dependabot, code scanning, and secret scanning alerts, summarize findings, and provide prioritized remediation guidance for active repositories.

Can I aggregate secret scanning and Dependabot alerts for multiple repositories?

Aggregate secret scanning and Dependabot alerts for repositories under active development by fetching open security alerts across all three alert types and summarizing findings to implement fixes before releases.

When do I need automated security alert remediation for my GitHub repository?

Automated security alert remediation is needed when GitHub security issues like Dependabot alerts, code scanning, and secret scanning pile up, making manual triage and fixing time-consuming and error-prone for development teams.