skills.rest
indexzero
indexzeroCOMMUNITY
Explore all skills by this author →
GitHub

gas

Detect and remediate GitHub Advanced Security alerts in pull requests.

Updated Aug 23, 2026
Search Tags:#automation#security#vulnerability#github#alerts#gas#hermeneutic
One-click install
npx skills add https://github.com/indexzero/dotvibes --skill gas
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: gas
Source: https://github.com/indexzero/dotvibes/tree/main/skills/gas
Command: npx skills add https://github.com/indexzero/dotvibes --skill gas

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires gh, jq, and includes scripts (resource) components.

What problem does it solve?

This Skill helps Claude analyze GitHub Advanced Security (GAS) alerts within their full project context and automatically apply fixes for common vulnerability patterns, reducing manual toil and risk.

Core Features & Use Cases

  • Automated Vulnerability Fixes: Apply fixes for common GAS alert patterns (e.g., SQL injection, path traversal, insecure temp files) with awareness of project context.
  • Hermeneutic Context Gathering: Traces data flow and architectural context to determine legitimate fixes that fit the codebase.
  • Safety & Validation: Runs tests after each fix and reverts changes if tests fail; maintains an audit trail.
  • Reporting: Generates concise summaries and documentation of fixes and decisions.

Quick Start

Use the GAS skill to fix all alerts in PR #123: /fix-gas 123

Frequently Asked Questions about gas

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automatically fix GitHub Advanced Security alerts in pull requests?▼

This Skill automates detection and remediation of GitHub Advanced Security alerts by analyzing your project context and applying fixes for common vulnerability patterns like SQL injection and path traversal. It traces data flow across your codebase, runs tests to validate changes, and maintains an audit trail of all modifications.

Can I use context from my project files to guide vulnerability fixes?▼

Yes, the Skill gathers hermeneutic context by reading CLAUDE.md, README.md, SECURITY.md, CODEOWNERS, and package.json to understand your architecture and apply fixes that align with your project's design and security posture.

What happens if a vulnerability fix breaks my tests?▼

The Skill automatically runs tests after each fix and reverts changes if tests fail, ensuring no regressions are introduced. It maintains a complete audit trail so you can review what was attempted and why changes were reverted.

Does this work with GitHub pull requests and the gh CLI?▼

Yes, the Skill integrates with GitHub pull requests via the gh CLI and jq for data parsing. You can target specific PRs by number to scan and fix all Advanced Security alerts in that review.

What vulnerability patterns can be automatically fixed?▼

The Skill addresses common GAS alert patterns including SQL injection, path traversal, and insecure temporary file handling. It applies context-aware fixes validated against your project's tests and coding patterns.

How do I get a summary of what was fixed?▼

The Skill generates concise summaries and documentation of all fixes and reasoning decisions, creating an auditable record of changes made to resolve GitHub Advanced Security alerts.

Related Skills

Explore More Software Engineering Skills→
MarcoAntoliniMarcoAntolini
1

readme-wizard

Generate and improve README.md files from project metadata.

Community
Advanced
haomingzhaomingz
12

web-security-audit

Identify OWASP Top 10 vulnerabilities and output a remediation guide.

Community
Advanced
clonable-edenclonable-eden
15

release-cekernel

Analyze git history to determine version bumps and generate release notes.

Community
Advanced
bailynlovebailynlove
1

requesting-code-review

Automate pre-commit code verification with static security scanning and quality gates.

Community
Advanced