skills.rest
apache
apacheOFFICIAL
Explore all skills by this author →
WebsiteGitHub

fix-security-issue

Coordinate security issue remediation across tracker, upstream clone, and PR lifecycle.

79|76|Updated Apr 28, 2026
Search Tags:#automation#workflow#security#triage#tracker
One-click install
npx skills add https://github.com/apache/airflow-steward --skill fix-security-issue-apache
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: fix-security-issue
Source: https://github.com/apache/airflow-steward/tree/main/.claude/skills/fix-security-issue
Command: npx skills add https://github.com/apache/airflow-steward --skill fix-security-issue-apache

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Orchestrates end-to-end remediation of security issues by reconciling tracker state, coordinating local upstream clones, and guiding the creation of public PRs with controlled, user-approved steps.

Core Features & Use Cases

  • Triage orchestration: Sync and normalize issue state across tracker, mail thread, and PRs before attempting any change.
  • Plan-driven fixes: Propose implementation plans, branch decisions, and file changes without touching code until user confirmation.
  • Governed PR workflow: Generate neutral PR titles/bodies, manage milestones/labels, and update trackers with the fix PR URL after public discussion.

Quick Start

Provide a plan for handling a security issue by first syncing state, then outlining an implementation plan, and awaiting user confirmation before any changes are proposed.

Frequently Asked Questions about fix-security-issue

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security vulnerability triage and pull request creation?▼

Automate security vulnerability triage by syncing issue state across trackers and mail threads, proposing an implementation plan, and generating a public PR with neutral titles and testing instructions after user confirmation.

What is the best way to plan a security fix without modifying code prematurely?▼

Plan a security fix by outlining branch decisions and file changes based on tracker state, ensuring no code is touched until explicit user confirmation is granted for the proposed implementation steps.

How does governed remediation work for tracked security issues?▼

Governed remediation works by enforcing step-by-step approvals, managing milestones and labels, and updating the tracker with the fix PR URL only after public discussion and user confirmation.

Can I sync issue state across a tracker, mail thread, and pull requests before fixing a vulnerability?▼

Yes, you can sync and normalize issue state across trackers, mail threads, and PRs during triage orchestration before attempting any code changes to ensure accurate vulnerability context.

Does the security issue fix workflow generate pull request bodies automatically?▼

Yes, the security issue fix workflow generates neutral PR titles and bodies automatically, complete with managed milestones, labels, and specific testing instructions for the proposed vulnerability fix.

Related Skills

Explore More Software Engineering Skills→
Kushal9889Kushal9889

setup-matt-pocock-skills

Configure issue tracker, triage labels, and domain documentation for engineering skills.

Community
Intermediate
tusharg1993tusharg1993

fix-sync

Resolve merge conflicts between public ClickHouse PRs and private sync branches.

Community
Advanced
roderikroderik
2

codeql

Identify security vulnerabilities in source code using CodeQL static analysis.

Community
Advanced
stevengonsalvezstevengonsalvez

gh-issue

Guide GitHub issue triage, root-cause analysis, and PR-ready patch creation.

Community
Intermediate