import-dependabot

Import Dependabot security alerts and create structured remediation task skeletons.

84|5|Updated Mar 6, 2026
One-click install
npx skills add https://github.com/fitlab-ai/agent-infra --skill import-dependabot
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: import-dependabot
Source: https://github.com/fitlab-ai/agent-infra/tree/main/.agents/skills/import-dependabot
Command: npx skills add https://github.com/fitlab-ai/agent-infra --skill import-dependabot

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

自动将 Dependabot 安全告警导入并生成修复任务骨架,避免手动重复工作并确保告警得到跟踪。

Core Features & Use Cases

  • 导入告警信息并创建任务目录与元数据,自动设置初始状态。
  • 不修改代码也不提交变更,完整记录分析与修复准备过程。
  • 适用于 open/dismissed/fixed 状态的告警,便于团队协作和基线合规。

Quick Start

Import a Dependabot alert and create a remediation task skeleton for it.

Frequently Asked Questions about import-dependabot

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Dependabot alerts intake and create remediation tasks?

To automate Dependabot alerts intake, this Skill imports security alerts and generates structured remediation task scaffolds with metadata. It automatically sets the initial state and logs activity for tracking progress across the workflow without modifying code.

What is the best way to track open and fixed Dependabot security alerts?

Tracking Dependabot security alerts involves importing open, dismissed, or fixed states to generate task scaffolds. This enforces task metadata requirements and updates task state to ensure alerts are tracked for baseline compliance and team collaboration.

Can I use this to prepare security remediation tasks without modifying code?

Yes, you can prepare security remediation tasks without modifying code. The Skill creates a task directory and metadata structure for analysis, logging activity during the preparation phase without committing any code changes to the repository.

What metadata does Dependabot remediation task creation enforce?

Dependabot remediation task creation enforces required task metadata to ensure structured intake. It automatically sets the initial task state, creates a task directory, and logs analysis activity to maintain tracking consistency across the workflow.

Does Dependabot alert remediation work with dismissed or fixed alert states?

Dependabot alert remediation works with open, dismissed, and fixed alert states. Importing these various alert states generates task scaffolds that help teams maintain baseline compliance and track progress throughout the security workflow.