Generate security vulnerability Skills from GHSA and HackerOne reports.
npx skills add https://github.com/yhy0/ghsa-skill-builder --skill ghsa-skill-builder
Please help me install this Agent Skill. Skill: ghsa-skill-builder Source: https://github.com/yhy0/ghsa-skill-builder/tree/main Command: npx skills add https://github.com/yhy0/ghsa-skill-builder --skill ghsa-skill-builder
This Skill automates the process of transforming raw vulnerability data from sources like GitHub Security Advisories (GHSA) and HackerOne reports into structured, actionable security Skills for AI agents. It bridges the gap between raw vulnerability intelligence and practical code auditing or penetration testing knowledge.
Use the ghsa skill to generate Python code auditing skills from recent GHSA data.
High-intent search queries and answers about installing and using this skill.
To generate AI code auditing skills from GitHub Security Advisories (GHSA), this skill automates the extraction of vulnerability patterns, root causes, and source-sink paths to create structured security knowledge bases.
Yes, you can update penetration testing skills using HackerOne reports by analyzing new exploitation techniques and vulnerability data to continuously refresh your structured AI security knowledge.
Extracting source-sink paths from vulnerability reports involves analyzing raw advisory data to identify root causes and detection strategies, which this skill structures into actionable layers for AI context loading.
Yes, building security skills from vulnerabilities requires Python 3.9+ and the GitHub CLI, which are necessary for fetching and processing data from GitHub Security Advisories and HackerOne.
Vulnerability types that can be transformed into structured security skills include injection, path traversal, and SSRF, covering programming languages like Python and Go for comprehensive code auditing.
Automated skill generation bridges the gap between raw vulnerability intelligence and practical code auditing, replacing manual rule creation by automatically structuring detection strategies and real-world case examples for AI agents.
ZateDetect vulnerability patterns in code across languages with regex-based scans.
shadow1ngAutomate network reconnaissance, service fingerprinting, and vulnerability assessment with NDJSON output.
Logos-LiberIdentifies security vulnerabilities in code, dependencies, and container images.
PriyanshKuniyalConfigures and manages SAST tools for automated vulnerability detection in CI/CD pipelines.
