openclaw-ghsa-maintainer

Inspect GHSA advisory state, verify private forks, and generate Markdown and JSON payloads.

Updated Apr 7, 2026
One-click install
npx skills add https://github.com/vut08905/openclaw-app --skill openclaw-ghsa-maintainer-vut08905
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: openclaw-ghsa-maintainer
Source: https://github.com/vut08905/openclaw-app/tree/main/.agents/skills/openclaw-ghsa-maintainer
Command: npx skills add https://github.com/vut08905/openclaw-app --skill openclaw-ghsa-maintainer-vut08905

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill streamlines end-to-end GHSA advisory maintenance for OpenClaw repositories by guiding the user through inspection, patch preparation, and publishing workflows.

Core Features & Use Cases

  • GHSA advisory state inspection and validation.
  • Private fork verification prior to publish.
  • Safe preparation of advisory Markdown and JSON payloads.
  • Guardrails and sequencing guidance for patch applications and publishing across GHSA API constraints.
  • Use Case: When preparing a new advisory, fetch current state, verify fork, craft payload, and publish with compliance to guardrails.

Quick Start

Ask the skill to inspect the current GHSA advisory, verify the private fork, and prepare Markdown and JSON payloads for review and publish.

Frequently Asked Questions about openclaw-ghsa-maintainer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage GitHub security advisories from review through publishing?

Managing GitHub security advisories involves inspecting the advisory state, verifying private forks, preparing Markdown and JSON payloads, and publishing with compliance to API guardrails. This streamlines the end-to-end maintenance workflow for OpenClaw repositories.

What do I need to prepare before publishing a GHSA advisory patch?

Before publishing a GHSA advisory patch, you need access to GitHub CLI, jq, and standard shell tooling. You must also verify the private fork and validate the advisory state to ensure compliance with API constraints and guardrails.

How do I generate Markdown and JSON payloads for a GHSA advisory?

Generating Markdown and JSON payloads for a GHSA advisory requires safe preparation steps following advisory state inspection. The workflow crafts compliant payloads for review and publish steps, adhering to guardrails and API sequencing constraints.

Why does GHSA advisory publishing require private fork verification?

Private fork verification is required during GHSA advisory publishing to ensure safety and compliance before patch application. It validates the repository state and prevents unauthorized access or errors when interacting with GitHub security advisory API constraints.

Can I use standard shell tooling to inspect and validate GHSA advisory states?

Yes, you can use standard shell tooling alongside GitHub CLI and jq to inspect and validate GHSA advisory states. This approach fetches the current advisory state and verifies repository conditions while adhering to advisory guardrails.