magpie-security-issue-deduplicate

Merge duplicate security issues while preserving credits and details.

79|76|Updated Apr 28, 2026
One-click install
npx skills add https://github.com/apache/magpie --skill magpie-security-issue-deduplicate
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: magpie-security-issue-deduplicate
Source: https://github.com/apache/magpie/tree/main/skills/security-issue-deduplicate
Command: npx skills add https://github.com/apache/magpie --skill magpie-security-issue-deduplicate

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automatically merges duplicate security issues, preserving all reporter credits, mailing-list threads, and attack vector descriptions.

Core Features & Use Cases

  • Merge Tracking Issues: Automatically detect and merge two tracking issues that describe the same vulnerability.
  • Preserve All Information: Keep all the details, credits, and descriptions from both issues.
  • Automated CVE JSON Regeneration: Regenerate the CVE JSON attachment to ensure both finders are credited.

Quick Start

Run the skill with the command 'dedupe #NNN #MMM', where NNN is the ID of the issue to keep and MMM is the ID of the duplicate issue to merge into the first one.

Frequently Asked Questions about magpie-security-issue-deduplicate

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I merge duplicate security issues while preserving reporter credits?

To merge duplicate security issues while preserving reporter credits, run the command 'dedupe #NNN #MMM', specifying the issue to keep and the duplicate to merge. All reporter credits, mailing-list threads, and attack vector descriptions from both issues are retained.

Can I regenerate CVE JSON attachments after merging duplicate bug tracking issues?

Yes, CVE JSON attachments are regenerated automatically after merging duplicate bug tracking issues. This ensures both finders are credited in the resulting JSON file, requiring a CVE tool adapter for the regeneration process.

Do I need GitHub API access to merge duplicate security issues?

Yes, GitHub API access is required to merge duplicate security issues. The skill operates on bug tracking systems using issue tracking tools and needs API access to interact with the issues being merged.

What's the best way to detect and merge two tracking issues describing the same vulnerability?

The best way to detect and merge two tracking issues describing the same vulnerability is using the 'dedupe #NNN #MMM' command. This automatically merges the duplicate issue into the primary one while preserving all details and descriptions from both.

Why does merging duplicate security issues preserve all details and descriptions?

Merging duplicate security issues preserves all details and descriptions to ensure no attack vector information or mailing-list threads are lost during the deduplication process. This maintains a complete historical record of the vulnerability report across both original issues.

Are there limitations when merging security issues across different bug tracking systems?

The skill applies to bug tracking systems using issue tracking tools and requires both a CVE tool adapter and GitHub API access. It is designed to merge issues within the same tracking environment rather than across separate platforms.