Fork scanned upstreams into a disclosure org and file draft advisories.
npx skills add https://github.com/lukehinds/scrutineer-attest-test --skill fork-lukehinds
Please help me install this Agent Skill. Skill: fork Source: https://github.com/lukehinds/scrutineer-attest-test/tree/main/skills/fork Command: npx skills add https://github.com/lukehinds/scrutineer-attest-test --skill fork-lukehinds
Staging scanned upstreams into a disclosure org, enabling private vulnerability reporting on the fork, and organizing draft security advisories for each finding to streamline collaboration with the relevant team.
Stage the scanned repository into the disclosure org and begin drafting advisories for each finding after a scan completes.
High-intent search queries and answers about installing and using this skill.
To create draft security advisories on a GitHub fork, this Skill stages the scanned upstream into a disclosure org and files one draft advisory per finding. It uses the GitHub CLI to manage repository operations and invites the relevant org team as collaborators.
Enabling private vulnerability reporting on a forked repository is handled automatically during the staging process. The Skill forks the upstream into a designated disclosure org and configures private vulnerability reporting to manage findings securely.
Managing vulnerability disclosures without modifying the upstream repo is achieved by forking the upstream into a disclosure org. The Skill files draft advisories and records scan notes on the fork, preserving a clean audit trail while leaving the original repository untouched.
Re-running the advisory filing workflow on an already scanned repository is safe. The Skill re-uses existing forks and notes, skips advisories that have already been filed, and ignores findings that are not yet ready for disclosure.
Yes, you can use the GitHub CLI to invite organization teams as collaborators on security advisories. The Skill creates a draft advisory for each finding and automatically invites the appropriate org team to collaborate on the disclosure.
Recording a scan as a note on a fork improves vulnerability traceability by attaching the scan results to the upstream commit. This ensures that draft advisories filed in the disclosure org maintain a clear link to the original scan data.
robertbr123Automate GitHub repository cloning, creation, forking, and management via gh CLI.
nexus-substrateCoordinate GitHub Security Advisory response workflows with private-fork patching and zero-disclosure publication.
lukehindsDraft GHSA-style advisory disclosures from scrutineer finding data.
aeoncity-demoMonitor private vulnerability reporting status across GitHub repositories.
