What problem does it solve? Publishing a GitHub Security Advisory (GHSA) involves fragile API constraints, private fork checks, and Markdown payload pitfalls that can cause failed publishes or corrupted advisory descriptions. This Skill guides maintainers through the full advisory lifecycle safely. ## Core Features & Use Cases - Advisory Inspection: Fetch advisory state, linked private fork, and vulnerability payload shape via the GitHub API before making changes. - Safe Payload Preparation: Build advisory Markdown with heredocs and PATCH JSON with jq to avoid escaped-newline corruption. - Publish Guardrails: Verify private fork PRs are closed, sequence severity and CVSS updates into separate PATCH calls, and confirm publish success afterward. - Use Case: A maintainer needs to publish a patched GHSA for OpenClaw. The Skill walks them through fetching the advisory, closing fork PRs, PATCHing fields in the correct order, publishing, and verifying state. ## Quick Start Use the openclaw-ghsa-maintainer skill to inspect advisory GHSA-xxxx, prepare the patch payload, and publish it after verifying the private fork has no open PRs.
