import-security-issue

Convert Gmail security reports into tracker issues with Needs triage status.

79|76|Updated Apr 28, 2026

Search Tags:#automation #security #github #gmail #triage #tracker

Ready to run

npx skills add https://github.com/apache/airflow-steward --skill import-security-issue

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: import-security-issue
Source: https://github.com/apache/airflow-steward/tree/main/.claude/skills/import-security-issue
Command: npx skills add https://github.com/apache/airflow-steward --skill import-security-issue

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This workflow converts inbound security reports into <tracker> tracking issues for triage by scanning the security mailing list and proposing imports, keeping confidentiality intact and drafting reporter receipts.

Core Features & Use Cases

Automatically convert new security reports into tracker issues with the Needs triage status for downstream triage.
Deduplicate candidates against existing trackers and pre-filter already-resolved threads to reduce noise.
Surface prior rejections and canned responses to maintain consistent messaging across reporters.

Quick Start

Scan your Gmail security inbox for new reports and run the import-security-issue workflow to generate proposed trackers in your project.

Frequently Asked Questions about import-security-issue

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate converting Gmail security reports into GitHub tracker issues?▼

Automating Gmail security report conversion requires scanning your security inbox and proposing imports using this workflow, which drafts tracker issues for triage while keeping content confidential.

How does deduplication work when importing security reports into a tracker?▼

Deduplication for security report imports works by cross-referencing inbound Gmail candidates against existing tracker issues, pre-filtering already-resolved threads to reduce noise and prevent duplicate triage entries.

Do I need GitHub CLI authentication to import security issues from Gmail?▼

Yes, you need GitHub CLI authentication and Gmail MCP access to create and manage trackers when importing security issues, ensuring the workflow can securely coordinate steps from discovery to classification.

Can I send automated rejection responses to invalid security reports on the same thread?▼

Yes, you can surface canned responses and prior rejections directly on-thread to maintain consistent messaging across reporters when filtering out invalid or already-resolved security reports.

What is the best way to triage inbound security mailing list reports without exposing private content?▼

The best way to triage inbound security reports without exposing private content is using a workflow that converts emails into tracker issues with Needs triage status while upholding confidentiality of the original private reports.

Why are some inbound security reports skipped during the tracker import process?▼

Inbound security reports are skipped during tracker import when the workflow deduplicates candidates against existing trackers and pre-filters already-resolved threads to reduce noise in your triage queue.