openclaw-ghsa-maintainer

Automate OpenClaw GHSA advisory lifecycle with inspection, patching, validation, and publishing.

5|Updated Mar 17, 2026
One-click install
npx skills add https://github.com/p-sree-sai-pavan/P.A.R.K.E.R --skill openclaw-ghsa-maintainer-p-sree-sai-pavan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: openclaw-ghsa-maintainer
Source: https://github.com/p-sree-sai-pavan/P.A.R.K.E.R/tree/main/gateway/.agents/skills/openclaw-ghsa-maintainer
Command: npx skills add https://github.com/p-sree-sai-pavan/P.A.R.K.E.R --skill openclaw-ghsa-maintainer-p-sree-sai-pavan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates the lifecycle management of OpenClaw GHSA advisories, including inspection, patching, validation, and publishing, reducing manual error and ensuring policy compliance.

Core Features & Use Cases

  • Advisory inspection: Retrieve current GHSA advisory state and linked private fork details.
  • Guarded patching: Build and apply PATCH payloads in the correct sequence with safety checks.
  • Publish validation: Verify no open PRs in the private fork before state transition to published.
  • Auditable workflow: Generate and verify Markdown/JSON payloads and document actions.

Quick Start

Fetch the advisory, validate the private fork status, then patch and publish following the guided prompts.

Frequently Asked Questions about openclaw-ghsa-maintainer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate GitHub security advisory lifecycle management?

Automate GitHub security advisory lifecycles by using API-driven state transitions to inspect, patch, validate, and publish GHSA advisories, ensuring safe and auditable patch sequencing without manual intervention.

What's the best way to validate a private fork before publishing a GHSA advisory?

Validate a private fork before publishing a GHSA advisory by verifying that no open pull requests exist in the fork, ensuring patch payloads are correctly formed and safe for API-driven state transitions.

How does patch validation work for GHSA advisories?

Patch validation for GHSA advisories works by building and applying PATCH payloads in a correct sequence with safety checks, generating and verifying Markdown and JSON payloads to document and audit actions.

Can I use this to generate JSON and Markdown payloads for security advisory patches?

Yes, you can generate and verify JSON and Markdown payloads for security advisory patches, ensuring the outputs are correctly formed and auditable for governance workflows before applying API-driven state transitions.

Why should I check for open PRs before transitioning a security advisory to published?

Checking for open PRs before transitioning a security advisory to published prevents merging incomplete or unreviewed code, ensuring safe and auditable patch sequencing within the private fork.