Automate vm2 vulnerability remediation from GHSA or CVE advisories.
npx skills add https://github.com/patriksimek/vm2 --skill fix-vulnerability
Please help me install this Agent Skill. Skill: fix-vulnerability Source: https://github.com/patriksimek/vm2/tree/main/.claude/skills/fix-vulnerability Command: npx skills add https://github.com/patriksimek/vm2 --skill fix-vulnerability
Automates the end-to-end process of patching vm2 sandbox vulnerabilities by translating security advisories (GHSA/CVE) into actionable fixes, testing plans, and documentation updates.
Provide a GHSA- or CVE-ID to start the patch workflow and produce a patched vm2 release.
High-intent search queries and answers about installing and using this skill.
To patch vm2 vulnerabilities, provide a GHSA or CVE ID to fetch the advisory, reproduce the PoC, perform root-cause analysis, and apply a structural fix with tests. This workflow automates end-to-end remediation for the vm2 sandbox.
Yes, vm2 security advisories are automatically translated into actionable patch workflows. The process fetches advisory details via GitHub CLI, reproduces the proof of concept, and conducts root-cause analysis to design a structural fix for the sandbox.
Yes, you need the GitHub CLI to fetch repository security advisories. Reproducing the vm2 vulnerability PoC requires gh CLI access and the project docs/ATTACKS.md file to guide structural mitigations and keep documentation in sync.
The best way to document vm2 vulnerability patches is updating the ATTACKS.md file. The workflow performs red-team validation and keeps security documentation in sync, ensuring governance and a reliable audit trail for the remediated sandbox.
Red-team validation is required during vm2 vulnerability patching to verify the structural fix holds against attacks. It conducts adversarial testing after the patch and tests are applied, ensuring the sandbox escape is fully remediated before release.
Fixing vm2 sandbox escapes requires access to repository security advisories, the GitHub CLI, and an existing docs/ATTACKS.md file. Without these dependencies, the end-to-end vulnerability remediation workflow cannot fetch advisories or guide mitigations.
bychrisrManage GitHub Security Advisory response lifecycles with private forks and coordinated disclosure.
marcel-heinzAudit, update, test, and publish the clawcity npm CLI package.
peancharoenRun static analysis tools to detect linting, type, and security issues across source code.
patriksimekIdentify and exploit vm2 sandbox escape vectors with reproducible test cases.
