skills.rest
MaxSaiets
MaxSaietsCOMMUNITY
Explore all skills by this author →
GitHub

openclaw-ghsa-maintainer

Inspect, patch, and publish OpenClaw GHSA advisories with jq and gh CLI.

Updated Mar 22, 2026
Search Tags:#automation#publishing#github#payload#maintainer#security-advisories#ghsa
One-click install
npx skills add https://github.com/MaxSaiets/myOpenCL --skill openclaw-ghsa-maintainer-maxsaiets
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: openclaw-ghsa-maintainer
Source: https://github.com/MaxSaiets/myOpenCL/tree/main/openclaw/.agents/skills/openclaw-ghsa-maintainer
Command: npx skills add https://github.com/MaxSaiets/myOpenCL --skill openclaw-ghsa-maintainer-maxsaiets

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Maintainer workflow for OpenClaw GitHub Security Advisories (GHSA). Use when Codex needs to inspect, patch, validate, or publish a repo advisory, verify private-fork state, prepare advisory Markdown or JSON payloads safely, handle GHSA API-specific publish constraints, or confirm advisory publish success.

Core Features & Use Cases

  • Inspect advisory state and linked private fork
  • Prepare Markdown and JSON payloads safely
  • Publish advisories while respecting GHSA constraints and sequence
  • Verify advisory publish success and state

Quick Start

Inspect the current GHSA advisory, prepare the Markdown and JSON payloads, verify the private fork PRs are closed, and publish the advisory.

Frequently Asked Questions about openclaw-ghsa-maintainer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I publish GitHub Security Advisories using the command line?▼

You can publish GitHub Security Advisories by preparing Markdown and JSON payloads, verifying private fork states and open PRs, then using gh CLI commands to submit patches while conforming to GHSA API constraints.

What is the process for inspecting a GHSA advisory and its private fork state?▼

Inspecting a GHSA advisory involves checking the current advisory state and verifying the linked private fork to ensure no open pull requests exist before attempting to patch or publish.

How do I safely assemble JSON payloads for GHSA advisories?▼

Safely assembling JSON payloads for GHSA advisories requires using jq to construct the JSON data, ensuring the Markdown and JSON payloads conform to the specific constraints of the GHSA API.

Does publishing a GHSA advisory require closing open PRs on the private fork first?▼

Yes, publishing a GHSA advisory requires verifying the private fork state and ensuring there are no open PRs before proceeding with the patch-based publishing sequence.

What are the limitations when handling GHSA API publish constraints?▼

GHSA API publish constraints limit the sequence of patch-based publishing, requiring careful handling of Markdown and JSON payloads and verification of advisory publish success and state after submission.

Related Skills

Explore More Software Engineering Skills→
githubgithub
4.9k

github-issue-query

Query GitHub issues with jq filters via the gh CLI.

Official
Intermediate
karaabd23-cryptokaraabd23-crypto
1

openclaw-ghsa-maintainer

Automate GitHub Security Advisory maintenance workflows for OpenClaw repositories.

Community
Advanced
AG064AG064
2

openclaw-ghsa-maintainer

Automates reviewing, patching, validating and publishing GitHub Security Advisories for Argentum.

Community
Advanced
bitan-delbitan-del
4

godseye-ghsa-maintainer

Inspect, patch, validate, and publish GitHub Security Advisories with gh CLI.

Community
Advanced