skills.rest
Atrium-Hermes
Atrium-HermesCOMMUNITY
Explore all skills by this author →
𝕏@atriumhermesGitHub

pvr-watchlist

Probe GitHub repositories for private vulnerability reporting status and submit recoverable drafts.

Updated Jun 2, 2026
Search Tags:#automation#security#vulnerability#watchlist#github-api#pvr
One-click install
npx skills add https://github.com/Atrium-Hermes/atrium-lighthouse --skill pvr-watchlist-atrium-hermes
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: pvr-watchlist
Source: https://github.com/Atrium-Hermes/atrium-lighthouse/tree/main/skills/pvr-watchlist
Command: npx skills add https://github.com/Atrium-Hermes/atrium-lighthouse --skill pvr-watchlist-atrium-hermes

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Weekly probe of repos on the security watchlist to verify whether private vulnerability reporting (PVR) is enabled, notify when the status flips, and re-submit queued advisories or flag for re-research when a draft is lost.

Core Features & Use Cases

  • Monitors the security watchlist by querying the GitHub API for the private-vulnerability-reporting status of each repo.
  • Automatically submits recoverable drafts to the PVR workflow, updates the memory state, and marks items as submitted or needs re-research.
  • Notifies operators on flips or when action is required, and updates both memory and the watchlist to keep risk tracking current.

Quick Start

Run the watchlist to detect PVR status flips and auto-submit drafts when available.

Frequently Asked Questions about pvr-watchlist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check if private vulnerability reporting is enabled across my GitHub repositories?▼

This Skill probes the GitHub API for each repository on your security watchlist to verify private vulnerability reporting status, detecting flips and notifying operators when action is required.

How do I automate GitHub security watchlist monitoring for private vulnerability reporting?▼

You can automate security watchlist monitoring by running this Skill weekly. It queries the GitHub API for private vulnerability reporting status, updates memory and watchlist state, and flags repositories needing re-research when drafts are lost.

What GitHub token permissions do I need to submit private vulnerability advisories?▼

Submitting private vulnerability advisories requires a GitHub token with public_repo and repository_admin:write scopes configured via GH_GLOBAL, plus access to memory/pending-disclosures and memory/security-watchlist files.

Can I auto-submit queued security advisories when private vulnerability reporting becomes available?▼

Yes, when private vulnerability reporting is enabled, this Skill automatically submits recoverable queued drafts to the PVR workflow, updates memory state, and marks items as submitted or flagged for re-research.

What happens when a private vulnerability reporting draft is missing from the watchlist?▼

When a draft is missing, this Skill flags the repository for re-research and updates both memory and the security watchlist to keep risk tracking current, ensuring no vulnerability goes unmonitored.

Does this Skill support per-repo overrides for private vulnerability reporting checks?▼

Yes, this Skill supports per-repo overrides for private vulnerability reporting checks, allowing customized monitoring configurations while maintaining automated status detection and watchlist updates across repositories.

Related Skills

Explore More Software Engineering Skills→
swarm-ai-researchswarm-ai-research

pvr-watchlist

Monitor watchlist repos for PVR status changes via the GitHub API.

Official
Advanced
swarm-ai-researchswarm-ai-research

disclosure-tracker

Monitor vulnerability disclosure drafts and escalate aging CRITICAL/HIGH advisories.

Official
Advanced
dnzengoudnzengou

aeon-vuln-scanner

Scan GitHub repositories for security vulnerabilities and generate responsible disclosure reports.

Community
Advanced
aeoncity-demoaeoncity-demo

pvr-watchlist

Monitor private vulnerability reporting status across GitHub repositories.

Community
Advanced