Detect GitHub private vulnerability reporting enablement on watchlisted repositories.
npx skills add https://github.com/aaronjmars/aeon --skill pvr-watchlist
Please help me install this Agent Skill. Skill: pvr-watchlist Source: https://github.com/aaronjmars/aeon/tree/main/skills/pvr-watchlist Command: npx skills add https://github.com/aaronjmars/aeon --skill pvr-watchlist
It prevents lost, time-sensitive private vulnerability reporting opportunities by regularly checking the security watchlist for when private vulnerability reporting (PVR) becomes enabled and then acting immediately.
Ask the system to run the pvr-watchlist skill once, optionally passing an owner/repo target to probe on demand instead of the full watchlist.
High-intent search queries and answers about installing and using this skill.
Monitor GitHub private vulnerability reporting by probing repositories via GitHub APIs to detect PVR status flips, then triggering follow-up actions like advisory submission or re-research escalation. This unattended weekly workflow ensures time-sensitive disclosure opportunities are not lost when settings change.
When private vulnerability reporting is enabled but the draft is missing, the system flags the watchlist entry for re-research and triggers targeted re-scanning guidance. This recoverability handling prevents lost disclosure opportunities by escalating urgent re-research needs for manual recovery.
Auto-submitting GitHub security advisories requires a pending disclosure draft and the necessary GitHub API permissions. If both conditions are met, the advisory payload is constructed and submitted automatically; otherwise, the workflow escalates for manual submission to ensure timely disclosure readiness.
Automated advisory submission checks for required GitHub API permissions before attempting payload submission. If permissions are insufficient, the workflow escalates the pending disclosure draft for manual submission rather than failing silently, ensuring no private vulnerability reporting opportunity is missed.
Running private vulnerability reporting checks requires the gh CLI tool along with curl, grep, ls, and tr. These dependencies support probing GitHub APIs, reading and updating local memory watchlist state, and processing repository metadata to detect PVR enablement flips.
Local memory watchlist state is required to track PVR status changes across weekly probes and detect enablement flips. Maintaining this state allows the workflow to compare previous and current GitHub API responses, identify when private vulnerability reporting becomes newly enabled, and recover staged disclosure drafts.
samuelmukotiAutomate GitHub repository cloning, creation, forking, configuration, and secrets via gh CLI or REST API.
enunoMonitor vulnerability lifecycle status in GitHub repositories via API calls.
lucasadcapital-beepManage GitHub Security Advisories through private-fork fix workflows and coordinated publication.
posit-devDrafts complete GitHub issue drafts for the Positron repository with duplicate checking.
